Hello, In http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL.html and http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL2.html, there is:
"If there are more than 8 bytes, only the first 8 bytes are present, and if there are fewer than 8 bytes, there are padding bytes after the address to pad the field to 8 bytes." Does anyone know why the 8 bytes limit ? Should we add that the padding is done with '\0' bytes ? -- Francois-Xavier _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
