Re: [tcpdump-workers] Ethernet Header length

2011-12-24 Thread MohanR
Hi, Thank you very much. I really appreciate the quick response. I spent last couple of days hitting my head because my captured packets never matched with ether_print() function. I should have looked into sll_if_print() function. I got confused because when I tried dumping with tcpdump, I used '

Re: [tcpdump-workers] Ethernet Header length

2011-12-24 Thread Guy Harris
On Dec 23, 2011, at 9:02 PM, ri...@happyleptic.org wrote: > The "any" device is not an ethernet device, but a virtual thing > that will bring you (at least on Linux) a "Linux Cooked" header > instead of an ethernet header. The "any" device currently only exists on Linux, so there's nothing other

Re: [tcpdump-workers] Ethernet Header length

2011-12-23 Thread rixed
> I captured packets using linux's 'any' interface. At the time of > capturing, only 'lo' was active. I used 'nc' to generate packets on > 'lo'. The "any" device is not an ethernet device, but a virtual thing that will bring you (at least on Linux) a "Linux Cooked" header instead of an ethernet he

[tcpdump-workers] Ethernet Header length

2011-12-23 Thread MohanR
Hi, I am trying to learn about packets using libpcap, and I already wrote a program to dump packets using libpcap to stdout. This is one of the packet which my program dumped, [cl:76 l:76 t:20111224100136.841069] 0011 0100 0110 000