Hi tech@, Now, when I use tcpdump file to capture loopback packets on OpenBSD, the "link-layer header type" in global header of pcap file is 0x0C, means "raw IP" packet. I download the file in Windows, and the Wireshark on Windows can't analyze it , and just shows " Raw packet data".
After referring https://www.wireshark.org/lists/wireshark-bugs/201502/msg00295.html, I change the "link-layer header type" from 0x0C to 0x6C(108), the pcap file can be decoded successfully (About link type, you can refer http://www.tcpdump.org/linktypes.html). Concerning about the "link-layer header type" of loopback packet, is it reasonable to use "0x6C" instead of "0x0C"? Thanks very much in advance! Best Regards Nan Xiao
