Re: [tcpdump-workers] DLT_LINUX_SLL

2004-12-14 Thread Alexander Dupuy
aman Reddy wrote: Well I have gone through the man page. I didn`t get the clear point. U mean the length of the header is the sum of the lengths of the fields in the header. Then it should be 16 bytes(2,2,2,8,2) but when I captured the packet using ethereal it is showing me 6 in the link-layer add

Re: [tcpdump-workers] DLT_LINUX_SLL

2004-12-13 Thread aman Reddy
Hi, Well I have gone through the man page. I didn`t get the clear point. U mean the length of the header is the sum of the lengths of the fields in the header. Then it should be 16 bytes(2,2,2,8,2) but when I captured the packet using ethereal it is showing me 6 in the link-layer address l

Re: [tcpdump-workers] DLT_LINUX_SLL

2004-12-13 Thread Guy Harris
aman Reddy wrote: I would like to know what is the length of the DLT_LINUX_SLL link layer header and please also explain to me the different fields in it. "man pcap", with modern versions of libpcap, describes the link-layer headers; it describes DLT_LINUX_SLL in some detail, and gives the leng

[tcpdump-workers] DLT_LINUX_SLL

2004-12-13 Thread aman Reddy
Hi all, I would like to know what is the length of the DLT_LINUX_SLL link layer header and please also explain to me the different fields in it. From the last 2 bytes field I can able to know which packet it has it`s payload. But how to know from where the packet is originated that the sour