>ip proto 4 encapsulated packets are printed as:
>
>print-ip.c:508: printf(" (ipip)");
>
>This tempts one to attempt to filter them with 'ip proto ipip',
>however this does not work. Under NetBSD, it gives one
>ip proto 94, and lead to some head-scratching on my part.
>
>Since it seems wrong to special-case 'proto ipip',
>I suppose it would be best if this were changed to
>something like '(ip-proto-4)'.
>
>I suppose the BSDs could change proto 4 to 'ipip'
>from 'ipencap' though I could see this breaking
>other things.
>
>Thoughts?
just for background info, from RFC1700:
> 94 IPIP IP-within-IP Encapsulation Protocol [JI6]
JI6 is for famous ji@att, and there's no refernece to RFC.
itojun
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
