On Thu, 2009-07-09 at 16:12 -0700, Peter Memishian wrote: > > > > http://cr.opensolaris.org/~seb/clearview-libpcap/ > > > > The idea is to translate DL_IPV4, DL_IPV6, and DL_6TO4 to DLT_RAW, which > > indicates that captured packets begin with an IP header. Wireshark can > > then decode them seamlessly without any modification to the application. > > The use of DL_6TO4 to gate the tunnel stuff seems to be a bit chummy with > the history of Solaris tunnels; how would a future libpcap developer > understand why that's correct?
Ah, you mean it would be clearer if we #ifdef'ed each DL_* value individually? We could certainly do that. I used DL_6TO4 simply because I knew that if it exists, the other two exist as well... -Seb