On Sun, May 16, 2004 at 06:26:40PM -0400, Michael Richardson wrote: > LINKTYPE enumeration. - metadata about linktype in file. > MUST put a meta-data packet about a particular link type before you > use that LINKTYPE. > > - - string saying name.
Is the name one thing assigned to it when a new link-layer type is registered? Or is it purely intended for human use, so that the name can be different in different captures of the same type? > - - offset to IP header? What if it's variable? > - - framing type. (SNAP) What if it's variable? (For example: link layers with 802.2 headers might use the DSAP to indicate OSI traffic and a SNAP header for IP traffic - or might even use the DSAP for IP traffic, although I don't know whether anybody does that in practice; IPX has either 3 or 4 different ways it's encapsulated on Ethernet; ATM - what if you have both "classical IP" and LANE traffic?) - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.