On Fri, Sep 21, 2001 at 05:46:32PM -0300, Mercia Eliane Bittencourt Figueredo wrote:
> [root@gandalf tcpdump-2001.09.21]# tcpdump -i atm0|more
What does it print if you do
tcpdump -e -i atm0
If this is an ARPHRD_ATM device, tcpdump appears to handle two different
types of encapsulation - one where you have the expected 802.2 LLC
header at the beginning of the frame, and one where there's no
link-layer header at all, just an IP header. However, libpcap assumes
that the encapsulation will include the 802.2 header, so if it doesn't,
filters won't work.
Unless there's some way for libpcap to determine, for a device, whether
it show an 802.2 header on snooped packets, we may have to treat this as
yet another Linux link-layer type that can only be sanely snooped in
cooked mode.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
