The -e option in "tcpdump" will print the link-level header when reading the pcap file.
You'll want to familiarize yourself with the manual page for "tcpdump" or else read the pcap file in with wireshark. If you do the latter, just be sure to run wireshark as a normal user and not root.
|