Date: Tue, 12 Dec 2000 12:39:59 -0500 From: Ethan Blanton <eblanton@cs.ohiou.edu> Subject: Re: Marina's DLT_RAW problem Message-ID: <20001212123959.A2493@entropy.chaos.int>
Wesley Eddy spake unto us the following wisdom:
> I just grabbed myself the latest version of libpcap for my linux box from
> www.tcpdump.org, which seems to carry the most 'official' patches to pcap.
> Well, remember a few months ago how Marina noticed that the define for
> DLT_RAW in the net/bpf.h on masaka was 101, while it was 12 on every other
> machine, and in the tcpdump.h file that tcptrace uses? I ran into it again.
> It appears that the newer libpcaps have decided DLT_RAW should be 101. So
> I guess it's highly likely that others will have problems too.
There appears to be a forked version of pcap out there, as well, which even
uses a different magic number; I ran into this trouble trying to get some
traces made for Issam and never did resolve it satisfactorily.. Just FYI.
Ethan
--
*Notice*: My GPG key has changed. Please retrieve the new key via:
gpg --keyserver wwwkeys.us.pgp.net --recv-key 883C1C14
Sorry for the inconvenience. Please note that the new key
is signed with my old key for preliminary verification.
This archive was generated by hypermail 2b30 : 01/09/01 EST