If you want to add more detail to your post, Link-Layer Type (Decimal) is 0x114 (Hex).
(Invoking related search suggestions now.)
If you have encountered the error message while trying to open a network capture file ( .pcap or .pcapng ) in Wireshark, Arkime, Suricata, or other analysis tools, you are dealing with a modern packet format that your software doesn't recognize. -pcap network type 276 unknown or unsupported-
The root cause of this error is an outdated packet analysis tool trying to read a PCAP file containing the modern link-layer header format.
This field maps to a standard list of values (called DLT_ values or LINKTYPE_ values). The official source is the pcap-linktype man page , which provides a complete and authoritative list. The pcap_datalink() function in the libpcap library is used to retrieve the link-layer header type of a savefile. Tools like tcpdump can also capture or read packets with a specific -y type. If you want to add more detail to
Here are a few options for a proper post, depending on where you are posting (e.g., a technical forum like Stack Overflow, a GitHub issue, or a community like Reddit).
Every packet capture file contains a global header that defines the Link-Layer Header Type (also known as the linktype or network type). This identifier tells packet analyzers how to decode the first layer of data in each packet. This field maps to a standard list of
editcap -T 113 broken_type276.pcap fixed_linux.pcap
from scapy.all import rdpcap, wrpcap, Raw pkts = rdpcap("in.pcap") out = [] for p in pkts: b = bytes(p)[4:] out.append(Raw(b)) wrpcap("out.pcap", out)