From owner-freebsd-hackers Thu Jul 30 17:59:32 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA05906 for freebsd-hackers-outgoing; Thu, 30 Jul 1998 17:59:32 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from alcanet.com.au (border.alcanet.com.au [203.62.196.10]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA05888 for ; Thu, 30 Jul 1998 17:59:20 -0700 (PDT) (envelope-from peter.jeremy@AUSS2.ALCATEL.COM.AU) Received: by border.alcanet.com.au id <40343>; Fri, 31 Jul 1998 10:58:51 +1000 Date: Fri, 31 Jul 1998 10:59:02 +1000 From: Peter Jeremy Subject: Re: TCPDUMP To: hackers@FreeBSD.ORG Message-Id: <98Jul31.105851est.40343@border.alcanet.com.au> Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 29 Jul 1998 22:44:27 +0200, sthaug@nethelp.no wrote: >Why is DLT_NULL wrong? ... > >What we'd like to have, is a two byte field - basically the standard >Ethernet type, minus source and destination addresses. This needs to be >done in cooperation with the tcpdump maintainers, of course. I had a similar problem with LPIP and wrote a set of patches to tcpdump and libpcap to support a 2-byte header. They're in my PR bin/7241. Bill Fenner solved the same problem by modifying LPIP to use 4-byte headers (his code is also in the above PR, but needs to have 'ifp' changed to '&sc->sc_if' in two places to work - the compiler will point out the places). Overall, I think Bill's approach is probably the correct one. Peter -- Peter Jeremy (VK2PJ) peter.jeremy@alcatel.com.au Alcatel Australia Limited 41 Mandible St Phone: +61 2 9690 5019 ALEXANDRIA NSW 2015 Fax: +61 2 9690 5247 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message