Wireshark mailing list archives

New page, giving link-layer header type values and descriptions, added to www.tcpdump.org


From: Guy Harris <guy () alum mit edu>
Date: Sun, 13 Mar 2011 14:41:14 -0700

        http://www.tcpdump.org/linktypes.html

contains a description of all the existing link-layer header types for which there is either

        1) an official standard;

        2) a reasonably complete description;

        3) a tcpdump or Wireshark dissector from which I could construct a reasonably complete description;

as well as a mention of the USER0 through USER15 types.  If the description wasn't available elsewhere on the Web, or 
in a published standard, I created a description page in the http://www.tcpdump.org/linktypes directory, and linked to 
it.

The table of link-layer header type values gives:

        the LINKTYPE_ name for the type - currently, that's only used inside libpcap, and not exported, as there are no 
APIs to fetch it;

        the value of that LINKTYPE_ name - that's what should be used in pcap and pcap-ng capture files;

        the corresponding DLT_ name - that's what's returned by the libpcap APIs;

        a description of the header.

The value for the DLT_ name is *NOT* given, as it may differ from platform to platform; in most cases, it's the same as 
the LINKTYPE_ value, but, in a few cases, a separate LINKTYPE_ value was assigned, in an attempt to cope with different 
BPF-bearing systems choosing different numeric values for the same DLT_ name.

It's linked to from the menu at the top of all pages.

I've checked in a change to the pcap-linktypes man page, in the libpcap trunk and 1.1 branch, to just refer to the Web 
page rather than to enumerate the link-layer header types.  The descriptions in pcap/bpf.h should also migrate to the 
linktypes.html page and subpages in the linktype directory.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: