Ethereal-users: [ethereal-users] Re: [tcpdump-workers] Problems viewing SNMP trap packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: kuznet@xxxxxxxxxxxxx
Date: Tue, 1 Feb 2000 20:47:29 +0300 (MSK)
Hello!

> Looks like RedHat stores the ethernet type in a fake offset (-4096)
> and starts the IP packet at 0.  The tcpdump.org libpcap that you built
> with doesn't have IPv6 and the RedHat does, so let's delete instructions
> 1 thru 8 since those are the IPv6 code:

RedHat libpcap in default mode works _very_ differently, because
it uses "cookied" format, which has no MAC headers at all.

Again, Linux has no DLT_NULL. Loopback packets are encapsulated
as ethernet ones and have protocol at its ethernet place.

Alexey Kuznetsov