Re: Marina's DLT_RAW problem

From: Ethan Blanton (
Date: 12/12/00

Date: Tue, 12 Dec 2000 12:39:59 -0500
From: Ethan Blanton <>
Subject: Re: Marina's DLT_RAW problem
Message-ID: <>

Wesley Eddy spake unto us the following wisdom:
> I just grabbed myself the latest version of libpcap for my linux box from
>, which seems to carry the most 'official' patches to pcap.
> Well, remember a few months ago how Marina noticed that the define for
> DLT_RAW in the net/bpf.h on masaka was 101, while it was 12 on every other
> machine, and in the tcpdump.h file that tcptrace uses? I ran into it again.
> It appears that the newer libpcaps have decided DLT_RAW should be 101. So
> I guess it's highly likely that others will have problems too.

There appears to be a forked version of pcap out there, as well, which even
uses a different magic number; I ran into this trouble trying to get some
traces made for Issam and never did resolve it satisfactorily.. Just FYI.

*Notice*:  My GPG key has changed.  Please retrieve the new key via:
            gpg --keyserver --recv-key 883C1C14
           Sorry for the inconvenience.  Please note that the new key
	   is signed with my old key for preliminary verification.

This archive was generated by hypermail 2b30 : 01/09/01 EST