Re: About LINKTYPE_LINUX_SLL / LINKTYPE_LINUX_SLL2

[Denis Ovsienko <denis () ovsienko info>]

 ---- On Fri, 13 Jul 2018 18:00:03 +0100 Francois-Xavier Le Bail <devel.fx.lebail () orange fr> wrote ---- 
> Hello,
>
> In http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL.html and
> http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL2.html, there is:
>
> "If there are more than 8 bytes, only the first 8 bytes are present, and if there are fewer than 8
> bytes, there are padding bytes after the address to pad the field to 8 bytes."
>
> Does anyone know why the 8 bytes limit ?

My guess is it is because of the 16 byte default limit on the header length, as Guy mentioned a couple days ago.

> Should we add that the padding is done with '\0' bytes ?

As far as encodings typically go, if the padding bytes are always discarded, it does not make difference. But it will 
not hurt to say the customary "MBZ".

-- 
    Denis Ovsienko


_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers