On Oct 14, 2012, at 4:25 PM, Marc Abramowitz <msabr...@gmail.com> wrote:

> marc@hyperion:~/dev/testing/tcpdump/tests
> 16:02:52 $ tcpdump -t -r e1000g.pcap
> reading from file e1000g.pcap, link-type 226
> tcpdump: unknown data link type 226 

That's LINKTYPE_IPNET, a/k/a Solaris ipnet (when I first saw "e1000g" I was 
wondering how Solaris was involved...), and recent versions of tcpdump and 
libpcap do support it.

Snow Leopard has libpcap 1.0.0/tcpdump 4.0.0, which didn't support 
LINKTYPE_IPNET; Lion has 1.1.0/4.1.0, which did.

I.e.:

        there's no guarantee that all of the top-of-trunk tests will work on 
anything other than top-of-trunk libpcap/tcpdump;

        not all versions of OSes that supply libpcap and tcpdump supply the 
latest version.
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Reply via email to