Ethereal-users: [Ethereal-users] protocol identification in libpcap header - help needed

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: vidyadhari dharmaraju <vidyadharid@xxxxxxxxxxx>
Date: Thu, 10 Jun 2004 03:20:40 +0100 (BST)
Hi,
 
I am trying to find how are the ppp,ip,tcp.udp,arp,ethernet captures distinguished by the libpcap format.
 
I have understood that "network" field in the libpcap header indicates the type of the capture. For example,
 
0x3200 0000  indicates capture starting with PPP frame
0x6A00 0000 indicates capture starting with classic IP   
 
like wise, can anyone tell me how to identify other protocol captures?? Or can you please tell me where should I look into Ethereal source code to get these numbers??
 
I am a novie user of Ethreal.. please do help me!
 
thanks,
Vidya

Yahoo! Messenger - Communicate instantly..."Ping" your friends today! Download Messenger Now