Re: Printing PPI packets

[Guy Harris <guy () alum mit edu>]

On May 5, 2011, at 11:28 AM, Darren Reed wrote:

> I see - you're concerned about how do you make "tcpdump icmp" work when the link type is PPI (or pcap-ng)

Presumably meaning "when the link type is PPI or when the file is a pcap-ng file" (pcap-ng isn't a link type, it's a 
file format).

> and the contents of the file could be a mixture of ethernet, Infiniband and others. The problem being that the 
> location of the IP header is different in each, requiring a different program to be generated and applied.

The location of the IP header *and* the location and values of the type field in the link-layer header are different.-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.