From owner-freebsd-hackers Thu Jul 30 17:19:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA29840 for freebsd-hackers-outgoing; Thu, 30 Jul 1998 17:19:52 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from etinc.com (et-gw.etinc.com [207.252.1.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA29835 for ; Thu, 30 Jul 1998 17:19:48 -0700 (PDT) (envelope-from dennis@etinc.com) Received: from dbsys (dbsys.etinc.com [207.252.1.18]) by etinc.com (8.8.7/8.6.9) with SMTP id UAA05268; Thu, 30 Jul 1998 20:29:23 -0400 (EDT) Message-Id: <199807310029.UAA05268@etinc.com> X-Sender: dennis@etinc.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Thu, 30 Jul 1998 20:29:38 -0400 To: Bill Fenner From: Dennis Subject: Re: TCPDUMP Cc: hackers@FreeBSD.ORG In-Reply-To: <199807301655.JAA13547@mango.parc.xerox.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG At 09:55 AM 7/30/98 -0700, Bill Fenner wrote: >What are you putting in the DLT_NULL header? Filters work fine >with most point-to-point devices with DLT_NULL header, which is a >4-byte value (in host byte order) containing the address family of >the packet. tcpdump (well, libpcap) makes sure that this first word >contains AF_INET as part of any filter you might create. This has been fixed. Thanks anyway. Dennis To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message