Re: live capture Ethernet gives me zero-packets

[Guy Harris <guy () alum mit edu>]

On Apr 27, 2011, at 12:07 PM, Michael Richardson wrote:

> I wrote some code C++, which I have placed under a do-anything license,
> which disguishes between EN10B and LINKTYPE_LINUX_SLL/DLT_LINUX_SLL.

I think there's another libpcap-based program out there that includes code to distinguish between them, and several 
other link-layer types, and parse packets; it has a name like "TCP Dump" or something such as that. :-)
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.