Default to first interface from pcap_findalldevs()

[tcpdump] / print-vjc.c

diff --git a/print-vjc.c b/print-vjc.c
index 14f35dad085b8d03e0cee69d82ae3725cecb384e..0f37924c52591fede0a7c283573f08e330d6af73 100644 (file)
--- a/print-vjc.c
+++ b/print-vjc.c
@@ -23,7 +23,7 @@
 #include "config.h"
 #endif
 
-#include <tcpdump-stdinc.h>
+#include <netdissect-stdinc.h>
 
 #include "netdissect.h"
 #include "slcompress.h"
@@ -70,6 +70,13 @@
  * We therefore leave "proto" - which is the PPP protocol type - in place,
  * *not* marked as unused, for now, so that GCC warnings about the
  * unused argument remind us that we should fix this some day.
+ *
+ * XXX - also, it fetches the TCP checksum field in COMPRESSED_TCP
+ * packets directly, rather than with EXTRACT_16BITS(); RFC 1144 says
+ * it's "the unmodified TCP checksum", which would imply that it's
+ * big-endian, but perhaps, on the platform where this was developed,
+ * the packets were munged by the networking stack before being handed
+ * to the packet capture mechanism.
  */
 int
 vjc_print(netdissect_options *ndo, register const char *bp, u_short proto _U_)
@@ -95,7 +102,7 @@ vjc_print(netdissect_options *ndo, register const char *bp, u_short proto _U_)
                if (bp[1])
                        ND_PRINT((ndo, " "));
                ND_PRINT((ndo, "C=0x%02x ", bp[2]));
-               ND_PRINT((ndo, "sum=0x%04x ", *(u_short *)&bp[3]));
+               ND_PRINT((ndo, "sum=0x%04x ", *(const u_short *)&bp[3]));
                return -1;
        case TYPE_ERROR:
                if (ndo->ndo_eflag)