Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Dissect packet without Ethernet data

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 30 Mar 2011 09:56:14 -0700
On Mar 30, 2011, at 4:11 AM, Hoang Thang wrote:

> How many step to register IP layer as root layer ?

Zero :-).

LINKTYPE_RAW, which has a value of 101:

	http://www.tcpdump.org/linktypes.html

can be used as a link-layer type for packets that start with an IP header, with no link-layer header in front of it.