linkLayers is not yet implemented

[qq1176914912]

ssh12346.zip
Excuse me.When I tried to get the pcap file in the following way, an error was reported at ‘device.Capture()’: linkLayers is not yet implemented.How do we solve this?

    ICaptureDevice device = new CaptureFileReaderDevice(filepath); 
      device.OnPacketArrival += new PacketArrivalEventHandler(ProcessPcapPacket);  
    device.Open();  
    device.Capture();

     private void ProcessPcapPacket(object sender, PacketCapture e)
        {
            var packet = PacketDotNet.Packet.ParsePacket(e.GetPacket().LinkLayerType, e.GetPacket().Data);
            ProcessPacket(packet);
        }

        void ProcessPacket(PacketDotNet.Packet packet)
        {
            try
            {
       var tcpPacket = packet.Extract<PacketDotNet.TcpPacket>();
       var udpPacket = packet.Extract<PacketDotNet.UdpPacket>();

       if (udpPacket != null)
       {
           var ipPacket = (PacketDotNet.IPPacket)udpPacket.ParentPacket;

           UdpPacketArived?.Invoke(this, new UdpPacketArivedEventArgs
           {
               Packet = new UdpPacket
               {
                   SourcePort = udpPacket.SourcePort,
                   DestinationPort = udpPacket.DestinationPort,
                   SourceIp = ipPacket.SourceAddress.ToString(),
                   DestinationIp = ipPacket.DestinationAddress.ToString(),
                   Data = udpPacket.PayloadData ?? new byte[] { }
               }
           });

           if (this.BuildUdpSessions)
           {
               this._udpStreamBuilder.HandlePacket(udpPacket);
           }

           _processingPrecentsPredicator.NotifyAboutProcessedData(packet.Bytes.Length);
       }
       else if (tcpPacket != null)
       {
           var ipPacket = (PacketDotNet.IPPacket)tcpPacket.ParentPacket;

           // Raise event Tcp packet arived event.
           TcpPacketArived?.Invoke(this, new TcpPacketArivedEventArgs
           {
               Packet = new TcpPacket
               {
                   SourcePort = tcpPacket.SourcePort,
                   DestinationPort = tcpPacket.DestinationPort,
                   SourceIp = ipPacket.SourceAddress.ToString(),
                   DestinationIp = ipPacket.DestinationAddress.ToString(),
                   Data = tcpPacket.PayloadData ?? new byte[] { }
               }
           });

           if (this.BuildTcpSessions)
           {
               this._tcpSessionsBuilder.HandlePacket(tcpPacket);
           }

           _processingPrecentsPredicator.NotifyAboutProcessedData(packet.Bytes.Length);
       }
   }
   catch (Exception ex)
   {
       // TODO: handle or throw this
       //Console.WriteLine(ex);
   }
 }

[qq1176914912]

ssh12346.zip Excuse me.When I tried to get the pcap file in the following way, an error was reported at ‘device.Capture()’: linkLayers is not yet implemented.How do we solve this?

    ICaptureDevice device = new CaptureFileReaderDevice(filepath); 
      device.OnPacketArrival += new PacketArrivalEventHandler(ProcessPcapPacket);  
    device.Open();  
    device.Capture();

     private void ProcessPcapPacket(object sender, PacketCapture e)
        {
            var packet = PacketDotNet.Packet.ParsePacket(e.GetPacket().LinkLayerType, e.GetPacket().Data);
            ProcessPacket(packet);
        }

        void ProcessPacket(PacketDotNet.Packet packet)
        {
            try
            {
       var tcpPacket = packet.Extract<PacketDotNet.TcpPacket>();
       var udpPacket = packet.Extract<PacketDotNet.UdpPacket>();

       if (udpPacket != null)
       {
           var ipPacket = (PacketDotNet.IPPacket)udpPacket.ParentPacket;

           UdpPacketArived?.Invoke(this, new UdpPacketArivedEventArgs
           {
               Packet = new UdpPacket
               {
                   SourcePort = udpPacket.SourcePort,
                   DestinationPort = udpPacket.DestinationPort,
                   SourceIp = ipPacket.SourceAddress.ToString(),
                   DestinationIp = ipPacket.DestinationAddress.ToString(),
                   Data = udpPacket.PayloadData ?? new byte[] { }
               }
           });

           if (this.BuildUdpSessions)
           {
               this._udpStreamBuilder.HandlePacket(udpPacket);
           }

           _processingPrecentsPredicator.NotifyAboutProcessedData(packet.Bytes.Length);
       }
       else if (tcpPacket != null)
       {
           var ipPacket = (PacketDotNet.IPPacket)tcpPacket.ParentPacket;

           // Raise event Tcp packet arived event.
           TcpPacketArived?.Invoke(this, new TcpPacketArivedEventArgs
           {
               Packet = new TcpPacket
               {
                   SourcePort = tcpPacket.SourcePort,
                   DestinationPort = tcpPacket.DestinationPort,
                   SourceIp = ipPacket.SourceAddress.ToString(),
                   DestinationIp = ipPacket.DestinationAddress.ToString(),
                   Data = tcpPacket.PayloadData ?? new byte[] { }
               }
           });

           if (this.BuildTcpSessions)
           {
               this._tcpSessionsBuilder.HandlePacket(tcpPacket);
           }

           _processingPrecentsPredicator.NotifyAboutProcessedData(packet.Bytes.Length);
       }
   }
   catch (Exception ex)
   {
       // TODO: handle or throw this
       //Console.WriteLine(ex);
   }
 }

The specific problem is with 'e.G Packet().LinkLayerType', which gets type 276

[kayoub5]

@PhyxionNL Is LINKTYPE_LINUX_SLL2 supported in the packet decoding?

[PhyxionNL]

Not yet, there's a PR that's missing tests. I'll get some feedback going there.