On Thu, Oct 11, 2001 at 12:40:14PM +0530, Shubha M - CTD, Chennai. wrote:
> This is Shubha again..IAm unable to understand what the "Link Level Headers"
> mean in the "-e" option of tcpdump..
It means "link-level headers". On Ethernet, for example, the first 14
bytes of a packet consist of:
a 6-byte destination Ethernet address
a 6-byte source Ethernet address
a 2-byte length/type field
If, when capturing on an Ethernet device, you capture with the "-e"
flag, tcpdump will, in addition to the information it prints without
that flag, also print
the source Ethernet address
the destination Ethernet address
the type of packet
the link-layer length of the packet
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
