libpcap and PPP
Carter Bullard
carter at qosient.com
Thu Nov 7 09:16:10 EST 2002
Hey Yotam,
When did they make the change? I hate it when they
do something that is not backward compatible. I'll
grab the newest libpcap today/tomorrow and I'll make
the changes to 2.0.6.beta.4 before the weekend.
Thanks for the mail, and hope all is well!!!
Carter
> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of
> Yotam Rubin
> Sent: Wednesday, November 06, 2002 4:29 PM
> To: argus-info at lists.andrew.cmu.edu
> Subject: Re: libpcap and PPP
>
>
> On Wed, Nov 06, 2002 at 11:12:24PM +0200, Yotam Rubin wrote:
> > Hey,
> >
> > In response to Amir's problem, PPP's linktype in pcap has been
> > changed from DLT_RAW to DLT_LINUX_SLL. As a result, argus no longer
> > works with a PPP interface. Argus' callback array needs to
> be updated.
> >
> > Regards, Yotam Rubin
>
> It should be further noted that the same callback that
> handled DLT_RAW will not handle DLT_LINUX_SLL properly, since
> DLT_LINUX_SLL has a 16 byte header.
>
>
> Regards, Yotam Rubin
>
>
More information about the argus
mailing list