[Ethereal-users] protocol identification in libpcap header - help needed

[vidyadhari dharmaraju <vidyadharid@xxxxxxxxxxx>]

Hi,

 

I am trying to find how are the ppp,ip,tcp.udp,arp,ethernet captures distinguished by the libpcap format.

 

I have understood that "network" field in the libpcap header indicates the type of the capture. For example,

 

0x3200 0000  indicates capture starting with PPP frame

0x6A00 0000 indicates capture starting with classic IP   

 

like wise, can anyone tell me how to identify other protocol captures?? Or can you please tell me where should I look into Ethereal source code to get these numbers??

 

I am a novie user of Ethreal.. please do help me!

 

thanks,

Vidya

---

Yahoo! Messenger - Communicate instantly..."Ping" your friends 
today! Download Messenger Now