The text 5dbb86e654d7, as Debian 6.0 (Squeeze) shipped it.
get the link-layer header type
pcap_datalink(3pcap) on Linux now
