Re: [tcpdump-workers] New LINKTYPE_ for EPON

2014-04-21 Thread Guy Harris
On Apr 21, 2014, at 6:38 AM, Philip Rosenberg-Watt wrote: > The frames as captured do not look like they've passed through the receive > function. Here's an example preamble as captured: > > D5 55 55 3C 02 44 > > As you can see, The first two bytes of the preamble have been stripped > accordi

Re: [tcpdump-workers] New LINKTYPE_ for EPON

2014-04-21 Thread Guy Harris
On Apr 21, 2014, at 3:24 PM, Philip Rosenberg-Watt wrote: > On 4/21/14 15:58 , "Guy Harris" wrote: > >> OK, so frames for LINKTYPE_ETHERNET_P2MP, or whatever we end up calling >> it, are: >> >> the last 6 octets of the modified preamble as specified by 65.1.3.2 >> "Transmit" in 802.3-20