https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7225
--- Comment #1 from Guy Harris <guy@xxxxxxxxxxxx> 2012-05-04 17:05:00 PDT ---
The Linux tun driver appears to give tun devices ARPHRD_NONE as a link-layer
type. libpcap prior to 1.0 mapped that to DLT_LINUX_SLL; libpcap 1.0 and later
map it to DLT_RAW. Neither of those is DLT_EN10MB, so I'm not sure why
Wireshark is trying to use DLT_EN10MB.
Can you reproduce this with Wireshark 1.6, which is the current supported
release?
If so, then, when you have the tun0 connection up:
What does "tcpdump -i tun0 -L" print?
What does "dumpcap -i tun0 -L" print?
(Those commands might have to be run as root. If you get a permissions error
when running them as yourself, try running them as root.)
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.