Re: [tcpdump-workers] Fw: [Winpcap-users] Using filters with IP encapsulation (RFC 2003)

No, You can look at the offset at which the IP addresses of the encapsulated IP packet are in the frame and compare it to the encapsulated address as an octetsting. Luis On Nov 28, 2007 6:38 PM, Gianluca Varenni <[EMAIL PROTECTED]> wrote: > I think the answer to this question is "no". Right? > >

Re: [tcpdump-workers] I Need to register some DLTs

On 9/19/07, Guy Harris <[EMAIL PROTECTED]> wrote: > On Aug 24, 2007, at 2:33 PM, Luis EG Ontanon wrote: > > Hi, > > I Need to register two DLTs they would be: > > > > DLT_MTP2_MULTISTANDARD > > [snip] > > DLT_MTP3_MULTISTANDARD > > [snip] &

[tcpdump-workers] I Need to register some DLTs

Hi, I Need to register two DLTs they would be: DLT_MTP2_MULTISTANDARD that will have a one byte pseudo header of which the MS bit indicates the direction the next three bits are reserved and must be set to zero in writing the last nibble is used to indicate the standard used for mtp3 packets trans