On Feb 15, 2014, at 12:17 PM, Luigi Rizzo <ri...@iet.unipi.it> wrote:
> + p->linktype = DLT_EN10MB;
So this either
1) only works on Ethernet devices and devices that supply Ethernet
headers
or
2) generates Ethernet headers that replace the native link-layer
headers for devices that don't supply Ethernet headers?
> @@ -307,6 +311,9 @@ struct capture_source_type {
> int (*findalldevs_op)(pcap_if_t **, char *);
> pcap_t *(*create_op)(const char *, char *, int *);
> } capture_source_types[] = {
> +#ifdef PCAP_SUPPORT_NETMAP
> + { NULL, pcap_netmap_create },
> +#endif
> #ifdef HAVE_DAG_API
> { dag_findalldevs, dag_create },
> #endif
This means that "tcpdump -D/tshark -D" and the Wireshark GUI won't show netmap
or vale devices; for command-line tools, this means you have to enter those
devices manually, but it might make it impossible to capture on those devices
in the Wireshark GUI.
Can you enumerate the netmap and vale devices? If so, you should have a
findalldevs routine.
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
