On Tue, Apr 10, 2001 at 09:52:10AM +0200, Yoann Vandoorselaere wrote:
> I'am able to handle that kind of packet, however,
> I just thought it was inconsistant.
It's inconsistent because the handling of the loopback device is
inconsistent - BSD and Linux handle it differently; BSD uses DLT_NULL
encapsulation, with the header being a 4-byte AF_ value (in host byte
order - and the AF_ values are the values for the host on which the
capture is being done, which, if you've saved the capture to a file, may
be different from the values on the host on which you're reading the
capture file), and Linux uses a fake Ethernet header.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
