2 * Copyright (c) 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
\r
3 * The Regents of the University of California. All rights reserved.
\r
5 * This code is derived from the Stanford/CMU enet packet filter,
\r
6 * (net/enet.c) distributed as part of 4.3BSD, and code contributed
\r
7 * to Berkeley by Steven McCanne and Van Jacobson both of Lawrence
\r
8 * Berkeley Laboratory.
\r
10 * Redistribution and use in source and binary forms, with or without
\r
11 * modification, are permitted provided that the following conditions
\r
13 * 1. Redistributions of source code must retain the above copyright
\r
14 * notice, this list of conditions and the following disclaimer.
\r
15 * 2. Redistributions in binary form must reproduce the above copyright
\r
16 * notice, this list of conditions and the following disclaimer in the
\r
17 * documentation and/or other materials provided with the distribution.
\r
18 * 3. All advertising materials mentioning features or use of this software
\r
19 * must display the following acknowledgement:
\r
20 * This product includes software developed by the University of
\r
21 * California, Berkeley and its contributors.
\r
22 * 4. Neither the name of the University nor the names of its contributors
\r
23 * may be used to endorse or promote products derived from this software
\r
24 * without specific prior written permission.
\r
26 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
\r
27 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
\r
28 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
\r
29 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
\r
30 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
\r
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
\r
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
\r
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
\r
34 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
\r
35 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
\r
38 * @(#) $Header: /tcpdump/master/libpcap/pcap/sll.h,v 1.2.2.1 2008-05-30 01:36:06 guy Exp $ (LBL)
\r
42 * For captures on Linux cooked sockets, we construct a fake header
\r
45 * a 2-byte "packet type" which is one of:
\r
47 * LINUX_SLL_HOST packet was sent to us
\r
48 * LINUX_SLL_BROADCAST packet was broadcast
\r
49 * LINUX_SLL_MULTICAST packet was multicast
\r
50 * LINUX_SLL_OTHERHOST packet was sent to somebody else
\r
51 * LINUX_SLL_OUTGOING packet was sent *by* us;
\r
53 * a 2-byte Ethernet protocol field;
\r
55 * a 2-byte link-layer type;
\r
57 * a 2-byte link-layer address length;
\r
59 * an 8-byte source link-layer address, whose actual length is
\r
60 * specified by the previous value.
\r
62 * All fields except for the link-layer address are in network byte order.
\r
64 * DO NOT change the layout of this structure, or change any of the
\r
65 * LINUX_SLL_ values below. If you must change the link-layer header
\r
66 * for a "cooked" Linux capture, introduce a new DLT_ type (ask
\r
67 * "tcpdump-workers@lists.tcpdump.org" for one, so that you don't give it
\r
68 * a value that collides with a value already being used), and use the
\r
69 * new header in captures of that type, so that programs that can
\r
70 * handle DLT_LINUX_SLL captures will continue to handle them correctly
\r
71 * without any change, and so that capture files with different headers
\r
72 * can be told apart and programs that read them can dissect the
\r
76 #ifndef lib_pcap_sll_h
\r
77 #define lib_pcap_sll_h
\r
80 * A DLT_LINUX_SLL fake link-layer header.
\r
82 #define SLL_HDR_LEN 16 /* total header length */
\r
83 #define SLL_ADDRLEN 8 /* length of address field */
\r
86 u_int16_t sll_pkttype; /* packet type */
\r
87 u_int16_t sll_hatype; /* link-layer address type */
\r
88 u_int16_t sll_halen; /* link-layer address length */
\r
89 u_int8_t sll_addr[SLL_ADDRLEN]; /* link-layer address */
\r
90 u_int16_t sll_protocol; /* protocol */
\r
94 * The LINUX_SLL_ values for "sll_pkttype"; these correspond to the
\r
95 * PACKET_ values on Linux, but are defined here so that they're
\r
96 * available even on systems other than Linux, and so that they
\r
97 * don't change even if the PACKET_ values change.
\r
99 #define LINUX_SLL_HOST 0
\r
100 #define LINUX_SLL_BROADCAST 1
\r
101 #define LINUX_SLL_MULTICAST 2
\r
102 #define LINUX_SLL_OTHERHOST 3
\r
103 #define LINUX_SLL_OUTGOING 4
\r
106 * The LINUX_SLL_ values for "sll_protocol"; these correspond to the
\r
107 * ETH_P_ values on Linux, but are defined here so that they're
\r
108 * available even on systems other than Linux. We assume, for now,
\r
109 * that the ETH_P_ values won't change in Linux; if they do, then:
\r
111 * if we don't translate them in "pcap-linux.c", capture files
\r
112 * won't necessarily be readable if captured on a system that
\r
113 * defines ETH_P_ values that don't match these values;
\r
115 * if we do translate them in "pcap-linux.c", that makes life
\r
116 * unpleasant for the BPF code generator, as the values you test
\r
117 * for in the kernel aren't the values that you test for when
\r
118 * reading a capture file, so the fixup code run on BPF programs
\r
119 * handed to the kernel ends up having to do more work.
\r
121 * Add other values here as necessary, for handling packet types that
\r
122 * might show up on non-Ethernet, non-802.x networks. (Not all the ones
\r
123 * in the Linux "if_ether.h" will, I suspect, actually show up in
\r
126 #define LINUX_SLL_P_802_3 0x0001 /* Novell 802.3 frames without 802.2 LLC header */
\r
127 #define LINUX_SLL_P_802_2 0x0004 /* 802.2 frames (not D/I/X Ethernet) */
\r