Alexander Bubnov wrote: > What should it be here? What would wireshark like to see here? Or in > another words what can be here instead of "No link information > available"?
Ethernet, IEEE 802.11, Token Ring, FDDI, PPP, etc. > The above mention packet keep 12( WTAP_ENCAP_RAW_IP) value for data > link type. What does mean "RAW IP"? It means that the packet has no link-layer data - the packet begins with the IP header. > As far as understand it means that > packet will be parsed begining at IP and it packet should not have any > data link layers, Ethernet and etc, Yes. > but if I am rigth in this case > what does raw packet data mean? It means we couldn't come up with a better name for it. :-) _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
