On Jun 9,  9:37pm, mjl@luckie.org.nz (Matthew Luckie) wrote:
-- Subject: Re: DLT_NULL and bpf writes

| i'll do that.
| 
| just to be clear, the behaviour of if_faith (as seen by a user process
| writing to a bpf socket) does not change.  internally, the faith output
| function changes, but the user api does not.
| 
| my only query is what to do about if_ppp.  i'll look into changing it to
| be DLT_PPP rather than DLT_NULL.

ppp is tricky. Is that the only interface that calls bpf_attach with 0 as
the third argument?
 
| Thanks for your feedback

You are welcome. Thanks for looking into this.

christos