On Nov 29, 2011, at 11:38 AM, Sam Roberts wrote:
> DLT_USER0 is available for internal use, and pcap_open_dead() will
> accept it, but pcap_dump_open() is complaining that it doesn't know
> the corresponding link type.
>
> I assume this is intentional, but why is it a feature? It seems
> prefera
Did this get missed? Is the patch not good?
libpcap can read user0 caps, it should be able to write them.
Cheers,
Sam
On Tue, Nov 29, 2011 at 11:38 AM, Sam Roberts wrote:
> DLT_USER0 is available for internal use, and pcap_open_dead() will
> accept it, but pcap_dump_open() is complaining that
DLT_USER0 is available for internal use, and pcap_open_dead() will
accept it, but pcap_dump_open() is complaining that it doesn't know
the corresponding link type.
I assume this is intentional, but why is it a feature? It seems
preferable that people use libpcap to write pcap files than rolling
th
