# unknown data link type 0xc

**URL:** <https://community.zeek.org/t/unknown-data-link-type-0xc/807>\
**Category:** Zeek\
**Created:** [July 11, 2005, 4:25pm UTC](https://community.zeek.org/t/unknown-data-link-type-0xc/807 "2005-07-11T16:25:54Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Martin\_Petraschek](https://avatars.discourse-cdn.com/v4/letter/m/e9a140/32.png) [@Martin\_Petraschek](https://community.zeek.org/u/Martin_Petraschek)\
**Post date:** [July 11, 2005, 4:25pm UTC](https://community.zeek.org/t/unknown-data-link-type-0xc/807/1 "2005-07-11T16:25:54Z")

</div>

Hi!

When I execute bro on a sample pcap file, I get the following error:

bro: problem with trace file /data/syndata/trace.cap - unknown data link type 0xc

What does that mean? The pcap file is OK and can be read with tcpdump -r

Thank you very much,

Martin

---

<div class="post-metadata">

**Author:** ![Christian\_Kreibich3](https://avatars.discourse-cdn.com/v4/letter/c/4af34b/32.png) [@Christian\_Kreibich3](https://community.zeek.org/u/Christian_Kreibich3)\
**Post date:** [July 12, 2005, 12:11am UTC](https://community.zeek.org/t/unknown-data-link-type-0xc/807/2 "2005-07-12T00:11:52Z")

</div>

Hi Martin,

---

<div class="post-metadata">

**Author:** ![Martin\_Petraschek](https://avatars.discourse-cdn.com/v4/letter/m/e9a140/32.png) [@Martin\_Petraschek](https://community.zeek.org/u/Martin_Petraschek)\
**Post date:** [July 12, 2005, 7:33am UTC](https://community.zeek.org/t/unknown-data-link-type-0xc/807/3 "2005-07-12T07:33:40Z")

</div>

I upgraded from the latest stable release (0.8a88) to the latest developer release (0.9a9),  
and now it works! Thanks for the hint!

Martin

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:37pm UTC](https://community.zeek.org/t/unknown-data-link-type-0xc/807/4 "2022-05-06T15:37:34Z")

</div>


