Wireshark · Ethereal-dev: Re: [Ethereal-dev] Capture-start option returns recv_ack error on AIX V5

[Guy Harris <guy@xxxxxxxxxx>]

> > Does the libpcap that comes with AIX use BPF, or DLPI?
> 
> BPF, I believe.

Then he's probably using a more standard version of libpcap, configured
to use DLPI.

> By the way, did any of those IBM guys get back
> to you about giving you more info about AIX BPF?

Nope - not a word.

> I think Shantala was trying to capture on /dev/tr0, which is
> Token Ring.

Yes, he was.

> The second parameter for dlbindreq should not be less
> than 0x600 for Ethernet.  I wonder if must be a different
> value for Token Ring (if that is actually the interface which
> Shantala is trying to capture on).

Maybe 0 will work there, as Token Ring, unlike Ethernet, always uses
802.2 LLC, so you don't have to deal with a type/length field.  (If so,
that's probably specific to Ethernet, and other link-layer types such as
FDDI would probably also use 0.)