Ethereal-users: Re: [ethereal-users] ethereal 0.8.11: error displaying outgoing packets on inter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sun, 13 Aug 2000 11:14:58 -0700
On Sun, Aug 13, 2000 at 10:04:36AM +0000, Stefan Huelswitt wrote:
> > Hopefully the Linux ISDN developers won't put their minds to coming up
> > with yet *another* wacky pile of gunk at the beginning of the packet....
> 
> Isn't there any documentation about how the packets are
> assembled? This really can't be such a secret thing.

I found nothing obvious in the "Documentation" directory of the Linux
2.2.15 kernel source that appears to mention oddities such as the
differences between packets going to and coming from the machine or that
appears to mention all the different types of gunk that precedes the IP
or PPP header.

The patch for tcpdump appears to add two new DLT_ types, but the
capture-file header for the captures people have sent us just use the
old DLT_RAW header, and the patch doesn't appear to handle the weirdness
at the beginning of the packets in any of those captures.