On Monday 23 October 2006 10:27, Guy Harris wrote:
> > * first I have to include the pcap-int.h file in order to be able to mess
> > with Libpcap's internals, starting with pcap_t::fd, and as you (may not)
> > know this file never gets installed in /usr/include :)
>
> ...because libpcap's
> Hello Hannes,
>
> on SuSE 10.1 (Kernel 2.6.16.13-4) I get the
> following message:
>
> # tcpdump -i eth1 inbound ether
> tcpdump: inbound/outbound not supported on linktype 1
> # tcpdump --version
> tcpdump version 3.9.4
> libpcap version 0.9.4
>
> Best regards
> jojo
ok makese sense now - so
Do we really need 4 bytes to store the endpoint address in the header?
Without changing the size of the header,
what about splitting the four bytes of endpoint address into two 16 bit integers
one of them is endpoint address and the other is which usb interface
the capture was taken on ? the us
