Guy Harris <[EMAIL PROTECTED]> writes:
> > While debuging a program I'm working on,
> > I came to an interesting libpcap 6.2 / linux 2.4 behavior which
> > is that pcap_datalink() return 1 (DLT_EN10MB) even when lo interface
> > was opened.
>
> Because that's the correct link-layer type for Linux loopback devices -
> packets on the loopback interface have a fake Ethernet header.
>
> > To make sure the problem wasn't comming from my program,
> > I modified the tcpdump source, to print the type argument in
> > lookup_printer(). Same problem.
>
> Why is this a problem? Any program using libpcap should, at minimum, be
> able to handle DLT_EN10MB as a link-layer type, and should therefore be
> able to handle Linux loopback packets.
>
I'am able to handle that kind of packet, however,
I just thought it was inconsistant.
--
Yoann Vandoorselaere | Real Programmers consider "what you see is what you get"
MandrakeSoft | to be just as bad a concept in Text Editors as it is in
| women. No, the Real Programmer wants a "you asked for
| it, you got it" text editor -- complicated, cryptic,
| powerful, unforgiving, dangerous.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
