Re: tcpdump - prism headers

[Guy Harris <guy () alum mit edu>]

David Young wrote:

> In principle, the radiotap header length is variable, but in practice, it
> is virtually always 64 bytes; this is an accomodation for libpcap/tcpdump,
> which historically could not handle variable-length headers.  (I haven't
> been paying close attention to notice whether libpcap/tcpdump supports
> variable lengths, now.)

Not in all cases (not for Token Ring headers with routing information, 
and not for 802.11 headers with four addresses, for example), but it 
*does* support variable-length radiotap headers in the 0.9.x release.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.