The argument to the -l flag to text2pcap is a LINKTYPE_ value, not a

DLT_ value, which is good because it's a numerical value and the
numerical values for some link-layer header types are OS-dependent, but
the numerical values for all LINKTYPE_ values are OS-independent.  Use
LINKTYPE_RAW, not the value for the DLT_RAW on some but not all OSes,
for raw IP.

Also, 7 is LINKTYPE_ARCNET_BSD, emphasis on the "_BSD"; there's also a
Linux encapsulation for ARCNet that is different.  Note that it's the
BSD flavor.

svn path=/trunk/; revision=51005

1 files changed, 3 insertions, 3 deletions

diff --git a/doc/text2pcap.pod b/doc/text2pcap.pod
index d2cbdcbd1c..d65f211dbf 100644
--- a/doc/text2pcap.pod
+++ b/doc/text2pcap.pod
@@ -116,8 +116,8 @@ for the Ethernet header in hex. Use this option if your dump has Layer
 encapsulation. Example: I<-e 0x806> to specify an ARP packet.
 
 For IP packets, instead of generating a fake Ethernet header you can
-also use I<-l 12> to indicate a raw IP packet to Wireshark. Note that
-I<-l 12> does not work for any non-IP Layer 3 packet (e.g. ARP),
+also use I<-l 101> to indicate a raw IP packet to Wireshark. Note that
+I<-l 101> does not work for any non-IP Layer 3 packet (e.g. ARP),
 whereas generating a dummy Ethernet header with I<-e> works for any
 sort of L3 packet.
 
@@ -141,7 +141,7 @@ Specify the link-layer header type of this packet.  Default is Ethernet
 of possible encapsulations.  Note that this option should be used if
 your dump is a complete hex dump of an encapsulated packet and you wish
 to specify the exact type of encapsulation.  Example: I<-l 7> for ARCNet
-packets.
+packets encapsulated BSD-style.
 
 =item -m E<lt>max-packetE<gt>