Re: [tcpdump-workers] Ethernet Header length

2011-12-24 Thread Guy Harris
On Dec 23, 2011, at 9:02 PM, ri...@happyleptic.org wrote: > The "any" device is not an ethernet device, but a virtual thing > that will bring you (at least on Linux) a "Linux Cooked" header > instead of an ethernet header. The "any" device currently only exists on Linux, so there's nothing other

[tcpdump-workers] Wrote a little guide for people getting started.

2011-12-24 Thread Akos Vandra
Hi! I just wrote a little guide, based on my own experiences on how to add a new datasource and how to contribute code to the libpcap project, because I found this information quite hard to figure out by myself. I added a new file named HACKING, and pushed it to my github port, axos88/libpcap.git

Re: [tcpdump-workers] Ethernet Header length

2011-12-24 Thread MohanR
Hi, Thank you very much. I really appreciate the quick response. I spent last couple of days hitting my head because my captured packets never matched with ether_print() function. I should have looked into sll_if_print() function. I got confused because when I tried dumping with tcpdump, I used '