> > http://cr.opensolaris.org/~seb/clearview-libpcap/ > > The idea is to translate DL_IPV4, DL_IPV6, and DL_6TO4 to DLT_RAW, which > indicates that captured packets begin with an IP header. Wireshark can > then decode them seamlessly without any modification to the application.
The use of DL_6TO4 to gate the tunnel stuff seems to be a bit chummy with the history of Solaris tunnels; how would a future libpcap developer understand why that's correct? -- meem
