[tcpdump-workers] Compile libpcap with DLT_LINUX_SLL2

Petr Vorel petr.vorel at gmail.com
Mon Mar 30 17:09:47 EDT 2020


Hi Francois,

> > The "-y" flag to tcpdump allows you to specify capturing with
> > DLT_LINUX_SLL2.

> Should DLT_LINUX_SLL2 be now the default when tcpdump is built with a libpcap that support it ?

I'd be glad if it was so, but not sure if first wireshark needs to support it.

BTW man pages (pcap.3pcap.in, pcap_datalink.3pcap.in, pcap_loop.3pcap and
pcap_next_ex.3pcap) mention only DLT_LINUX_SLL.

Kind regards,
Petr


More information about the tcpdump-workers mailing list