Scott, I believe bittwist might be able to do the trick for you: bittwist.sourceforge.net
--Jim ________________________________________ Hello I have a dataset where IP is transported in UDP For each packet in the wire shark pcap capture I need to strip the first 50 bytes. I would like to then have a new file with just the IP packets free of the encapsulating UDP wrapper. I have been working with Filter Display but I am at a loss. Can anyone bail me out? Thanks Scott _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users