Comment # 4
on bug 9358
from Guy Harris
If somebody could attach a capture from a remote virtual interface on
Mavericks, that would be very helpful; it would let us determine what the
encapsulation is, add a dissector for it, and have the default mapping from
link-layer types to dissectors map USER2 to that dissector (it's just a
default, and the user can change it if they're using USER2 for some other
purpose).
At some point, I'll assign official LINKTYPE_ and DLT_ values for the PKTAP
link-layer header type (LINKTYPE_APPLE_PKTAP and DLT_APPLE_PKTAP), have the
pcap-bpf.c code map DLT_USER2 from BPF to DLT_APPLE_PKTAP, and, when that gets
into an official libpcap release, file a Radar telling Apple to upgrade to the
new libpcap.
You are receiving this mail because:
- You are watching all bug changes.