Phil Mulholland wrote:
Sure. The header is used to multiplex PCI frames and Ethernet frames onto a custom processor interface. Our libpcap patch captures from this interface. It looks like:
OK, that's a bit specialized, so it probably won't provoke any major pcap-NG, tcpdump, Wireshark, etc. changes.
I've assigned a value of 198 to DLT_RAIF1. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
