Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] link-layer type selection

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 18 Jul 2008 00:26:07 -0700

On Jul 17, 2008, at 10:51 PM, tulip neo wrote:
I have a complete HEX dump for MTP2->....

	...
What should be the link-layer type of this packet?

DLT_MTP2, i.e. 140.
And what should be the best way to pick link-layer type for any packet?

Look at the the DLT_ values in the bpf.h header from libpcap.