Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

link type 101 should be converted to 12 to avoid pcap_compile_nopcap error #4584

Open
crackevil opened this issue Nov 6, 2024 · 0 comments

Comments

@crackevil
Copy link

Brief description

link type 101 is described as raw as the same of link type 12, but it will fail function pcap_compile_nopcap(), or some others referring link type.
this issue was found at tcpdump() function in utils.py. it uses PcapReader's link type as it, but link type 101 is NOT defined in dlt.h of libpcap. it should convert to 12( not very sure) which is also defined as raw ip.

Scapy version

2.6.1

Python version

3.10

Operating system

windows 10

Additional environment information

No response

How to reproduce

call pcap_compile_nopcap() in lib/winpcapy, link type set to 101, the function returns -1, as link type 12 returns 0

Actual result

No response

Expected result

No response

Related resources

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant