ip proto 4 encapsulated packets are printed as:
print-ip.c:508: printf(" (ipip)");
This tempts one to attempt to filter them with 'ip proto ipip',
however this does not work. Under NetBSD, it gives one
ip proto 94, and lead to some head-scratching on my part.
Since it seems wrong to special-case 'proto ipip',
I suppose it would be best if this were changed to
something like '(ip-proto-4)'.
I suppose the BSDs could change proto 4 to 'ipip'
from 'ipencap' though I could see this breaking
other things.
Thoughts?
--jhawk
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
