[tcpdump-workers] Update of XRA header spec

Hi, I was wondering what the procedures are for updating specifications for a certain link type? More specifically, we want to add some extra TLVs to the specification of DLT_DOCSIS31_XRA31 (https://support.excentis.com/index.php?/Knowledgebase/Article/View/159). All changes are of course ba

[tcpdump-workers] Endianness issue with selecting non-fragmented packets

I am running tcpdump under FreeBSD 11 on an AMD64. I have a file containing UDP packets and IP fragments. This command (the filter corresponds to the information on the man page): tcpdump -r file.pcap "(ip[6:2] & 0x1FFF = 0)" unexpectedly prints all of the packets :-( The command: tc

Re: [tcpdump-workers] Endianness issue with selecting non-fragmented packets

On Jul 27, 2018, at 11:21 AM, Richard Clayton wrote: > I am running tcpdump under FreeBSD 11 on an AMD64. > > I have a file containing UDP packets and IP fragments. > > This command (the filter corresponds to the information on the man > page): > >tcpdump -r file.pcap "(ip[6:2] & 0x1FFF =

Re: [tcpdump-workers] Update of XRA header spec

On Jul 27, 2018, at 3:51 AM, Bruno Verstuyft wrote: > I was wondering what the procedures are for updating specifications for a > certain link type? If the layout of the header is specified, in whole or in part, by a page on tcpdump.org's Web site, i.e. one of the linktypes/LINKTYPE_XXX.html