RE: odd tcpdump

Greaves Tristan TM (hel@admin.de)
Thu, 26 Nov 1998 14:37:36 +0100


--Boundary-=_nWlrBbmQBhCDarzOwKkYHIDdqSCD
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

Hello,

The problem you described is also 2.1 kernel-versions.
When sending out packets, for syncPPP devices a 10 byte long fake header is
build (isdn_net.c:isdn_net_header), which later is removed
(isdn_ppp.c:isdn_ppp_xmit). tcpdump reads these outgoing packets with
fake-header from the packet-socket. Incoming packets don't have this header, so
here tcpdump works ok.
I have a patch for 2.1 kernels, which works fine for me, but i really dont
know, if it is the correct solution. Instead of creating a fake-header, it sets
dev->hard_header_len to ensure there is room in the header.

Lars Heete

--Boundary-=_nWlrBbmQBhCDarzOwKkYHIDdqSCD
Content-Type: text/plain;
name="isdn-2.1.diff"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="tcpdump-isdn.diff"
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--Boundary-=_nWlrBbmQBhCDarzOwKkYHIDdqSCD--

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/