Ethereal-users: [Ethereal-users] link-layer type on linux

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Mathieu Lacage <Mathieu.Lacage@xxxxxxxxxxxxxxx>
Date: Wed, 18 Feb 2004 17:13:51 +0100
hi,

I have been trying recently to use ethereal 0.10.0 on my 2.4.23 linux
box with a madwifi driver (which suposedly supports the prism header 
data-reporting thing). I have tried to get ethereal to dump and display
the prism header of each packet but failed to do so.

As far as I can tell by asking a few BSD users and reading the ethereal
and libpcap code, it looks like I should be able to select the
link-layer type from the UI when starting a capture in the drop-down
menu below the interface selection. However, this drop-down menu is
always greyed out which indicates (by reading the code for this dialog
in ethereal) that the network interfaces I am trying to dump from
support only one type of link-layer dump. Further code reading in
libpcap seems to show that the pcap-linux.c file is the culprit: it sets
dlt_count to zero which implies no link-layer change capability. 

So, I wonder if Linux users can actually use this feature. If so, maybe
someone could suggest what I screwed up ?

Mathieu
-- 
Mathieu Lacage <mathieu.lacage@xxxxxxxxxxxxxxx>