On Thu, Dec 05, 2002 at 01:19:03PM -0800, Guy Harris wrote: > As I've not yet seen a Frame Relay capture from snoop or any snoop > derivative, I will, for now, make Ethereal's capture-reading library > interpret 10 as Ethernet
Unfortunately, there is one link-layer type value that snoop on UNICOS/mp apparently uses one way (the DLPI way, I assume - it's "software loopback", which has no standard interpretation but UNICOS/mp apparently does it as raw IP with no link-layer headers) and Shomiti-format tools use another way (the Shomiti way), so I checked in code to have the snoop capture reader check the first record (if present) to see how much padding it has and use that to tell whether the file is a snoop file or a Shomiti file. The next release should have that fix (unless Gerald started building it before I checked in my changes).
