The default DLT is optimized for only ETL... Back to DLT_USER

the-tcpdump-group · Jan 27, 2022 · ccd2969 · ccd2969
1 parent b20af4b
commit ccd2969
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pcap-etw.c b/pcap-etw.c
@@ -315,7 +315,7 @@ pcap_create_interface(const char *device _U_, char *ebuf)
 	handle->stats_op = pcap_stats_etw;
 	handle->read_op = pcap_read_op_etw;
 	handle->snapshot = MAXIMUM_SNAPLEN;
-	handle->linktype = DLT_ETW;
+	handle->linktype = DLT_USER0;
 
 	pcap_etw_t* etw = (pcap_etw_t*)handle->priv;
 	pcap_etw_list_init(&etw->events);