Wireshark-dev: Re: [Wireshark-dev] link-layer type selection
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 18 Jul 2008 00:26:07 -0700

On Jul 17, 2008, at 10:51 PM, tulip neo wrote:

I have a complete HEX dump for MTP2->....


	...

What should be the link-layer type of this packet?


DLT_MTP2, i.e. 140.
And what should be the best way to pick link-layer type for any packet? 


Look at the the DLT_ values in the bpf.h header from libpcap.