diff options
author | Guy Harris <guy@alum.mit.edu> | 2013-07-29 08:30:42 +0000 |
---|---|---|
committer | Guy Harris <guy@alum.mit.edu> | 2013-07-29 08:30:42 +0000 |
commit | 7c3e7c9506ba77322bc524ac6b93909695e4f88e (patch) | |
tree | 466804e6aef180cbbf9bec72bb65db30869d980d /doc/text2pcap.pod | |
parent | 3e4e1448d271ff604a4c3aea7937663e6bd1d9b9 (diff) |
The argument to the -l flag to text2pcap is a LINKTYPE_ value, not a
DLT_ value, which is good because it's a numerical value and the
numerical values for some link-layer header types are OS-dependent, but
the numerical values for all LINKTYPE_ values are OS-independent. Use
LINKTYPE_RAW, not the value for the DLT_RAW on some but not all OSes,
for raw IP.
Also, 7 is LINKTYPE_ARCNET_BSD, emphasis on the "_BSD"; there's also a
Linux encapsulation for ARCNet that is different. Note that it's the
BSD flavor.
svn path=/trunk/; revision=51005
Diffstat (limited to 'doc/text2pcap.pod')
-rw-r--r-- | doc/text2pcap.pod | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/doc/text2pcap.pod b/doc/text2pcap.pod index d2cbdcbd1c..d65f211dbf 100644 --- a/doc/text2pcap.pod +++ b/doc/text2pcap.pod @@ -116,8 +116,8 @@ for the Ethernet header in hex. Use this option if your dump has Layer encapsulation. Example: I<-e 0x806> to specify an ARP packet. For IP packets, instead of generating a fake Ethernet header you can -also use I<-l 12> to indicate a raw IP packet to Wireshark. Note that -I<-l 12> does not work for any non-IP Layer 3 packet (e.g. ARP), +also use I<-l 101> to indicate a raw IP packet to Wireshark. Note that +I<-l 101> does not work for any non-IP Layer 3 packet (e.g. ARP), whereas generating a dummy Ethernet header with I<-e> works for any sort of L3 packet. @@ -141,7 +141,7 @@ Specify the link-layer header type of this packet. Default is Ethernet of possible encapsulations. Note that this option should be used if your dump is a complete hex dump of an encapsulated packet and you wish to specify the exact type of encapsulation. Example: I<-l 7> for ARCNet -packets. +packets encapsulated BSD-style. =item -m E<lt>max-packetE<gt> |