On Tue, Dec 17, 2002 at 03:39:15AM -0800, Guy Harris wrote:
> Unless somebody comes up with a good reason *NOT* to make "-e" cause
> "-x" and "-X" to dump the link-layer header,
Actually, I can think of a reason why we might not want to to it - it
might break scripts that parse the result of "tcpdump -e -x" *and* that
expect the hex dump not to include the link-layer header.
The "link-layer header isn't dumped" is documented going back at least
as far as tcpdump 3.4:
-x Print each packet (minus its link level header) in
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
hex. The smaller of the entire packet or snaplen bytes
will be printed.
so perhaps we should add a new command-line flag to handle that (or,
along the lines of "-t" vs. "-tt" and "-v" vs. "-vv", have "-xx" and
"-XX" cause the link-layer header to be printed).
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
