Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Jul 1998 09:55:36 PDT
From:      Bill Fenner <fenner@parc.xerox.com>
To:        Dennis <dennis@etinc.com>
Cc:        hackers@FreeBSD.ORG
Subject:   Re: TCPDUMP 
Message-ID:  <199807301655.JAA13547@mango.parc.xerox.com>
In-Reply-To: Your message of "Tue, 28 Jul 1998 09:55:12 PDT." <199807281657.MAA21402@etinc.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
What are you putting in the DLT_NULL header?  Filters work fine
with most point-to-point devices with DLT_NULL header, which is a
4-byte value (in host byte order) containing the address family of
the packet.  tcpdump (well, libpcap) makes sure that this first word
contains AF_INET as part of any filter you might create.

  Bill

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807301655.JAA13547>