tcpdump mailing list archives

Re: Request for new Link-layer header type


From: Guy Harris <guy () alum mit edu>
Date: Thu, 1 Sep 2011 13:59:14 -0700


On Aug 31, 2011, at 4:03 AM, <HPfrommer () hilscher com> <HPfrommer () hilscher com> wrote:

Unfortunately there is no document online, but the structure is quite simple, it's just a 32-bit value containing 
some bit fields:

So a packet has a 32-bit value, followed by the Ethernet header, starting with the destination MAC address?

uiGpio:
0: comes for Ethernet port
1: comes for GPIO port

So if uiGpio is set, is what follows an Ethernet packet, or something else?

uiTransparent:
0: normal Ethernet mode
1: transparent capture mode

Is there any difference between the packets in those two modes?

uiLength:
real frame length in bytes

How does that differ from the pcap length field?
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: