The text 8859f3183435, as Debian 7 (Wheezy) shipped it.
get the link-layer header type
pcap_datalink(3pcap) on Linux now