setting DLT of savefile w/o a capture handle.

["Aaron Turner" <synfinatic () gmail com>]

Using libpcap 0.9.4 under OS X 10.4.x:

Trying to create a new savefile with a DLT of my choosing (in this
case DLT_EN10MB):

dlt_pcap = pcap_open_dead(DLT_EN10MB, 65535);
pcap_dump =  pcap_dump_open(dlt_pcap, outfile);
printf( "DLT of pcap_dump is %s",
               pcap_datalink_val_to_name(pcap_datalink(pcap_dump)));

returns the string: (null)

I've tried using pcap_set_datalink() on pcap_dump, but it returns the error:
EN10MB is not one of the DLTs supported by this device

How do I get this to work?

Thanks,
Aaron

--
Aaron Turner
http://synfin.net/
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.