On May 5, 2011, at 11:28 AM, Darren Reed wrote: > I see - you're concerned about how do you make "tcpdump icmp" work when the > link type is PPI (or pcap-ng)
Presumably meaning "when the link type is PPI or when the file is a pcap-ng file" (pcap-ng isn't a link type, it's a file format). > and the contents of the file could be a mixture of ethernet, Infiniband and > others. The problem being that the location of the IP header is different in > each, requiring a different program to be generated and applied. The location of the IP header *and* the location and values of the type field in the link-layer header are different.- This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
