> While debuging a program I'm working on,
> I came to an interesting libpcap 6.2 / linux 2.4 behavior which
> is that pcap_datalink() return 1 (DLT_EN10MB) even when lo interface
> was opened.
Because that's the correct link-layer type for Linux loopback devices -
packets on the loopback interface have a fake Ethernet header.
> To make sure the problem wasn't comming from my program,
> I modified the tcpdump source, to print the type argument in
> lookup_printer(). Same problem.
Why is this a problem? Any program using libpcap should, at minimum, be
able to handle DLT_EN10MB as a link-layer type, and should therefore be
able to handle Linux loopback packets.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
