Brian C. Grayson wrote:
>   Ah -- thanks to all the responders.  To my inexperienced
> mind, ``link-level'' and ``Ethernet'' are not related at first
> glance.  Shows how much I know about networking, huh?  Would
> adding (typically Ethernet) in parentheses to the man page be
> more helpful than confusing?  I notice the source code says
> ethernet, not link-level, in tcpdump.c.

Dave Cherkus wrote:
> The man page says:
> 
>        If  the  '-e'  option  is  given, the link level header is
>        printed out.  On ethernets,  the  source  and  destination
>        addresses, protocol, and packet length are printed.
> 
> So, is the 85 in the above sample output the packet length?

Oh!  Hmm, that'll teach me for not having read the whole of the manual page.
85 is indeed the packet length and there is even a description of the
different link levels - ethernet, FDDI, etc.

Thanks,

J

-- 
    1024/55A5BC19        0F 3F 62 56 18 10 8B 84  43 8F F4 94 93 37 76 AA

S.E.P.