Wireshark · Ethereal-dev: Re: [Ethereal-dev] Bug ugly protocol graph

[Guy Harris <gharris@xxxxxxxxx>]

Ulf Lamping wrote:

> Looks already interesting, e.g. I didn't know we already have a 
> something like a "null" dissector :-)

Arguably one of the worst-named DLT_ values - DLT_RAW is "null" in the 
sense of having no link-layer header (traffic is all IP), whereas 
DLT_NULL has a real-live header with a 4-byte BSD address family type 
indicating the traffic type.

I guess we could call it "BSD loopback"....