NetPacket::SLL2(3pm)

✨ NAME ✨

hey bestie 💖 this is NetPacket::SLL2(3pm) from the User Contributed Perl Documentation, and it's here to help you assemble and disassemble Linux cooked capture (SLL2) packets. no cap, it's giving niche-but-iconic. ✨

🌸 VERSION 🌸

version 1.8.0 — that's the version, bestie. 🎀

🦋 SYNOPSIS 🦋

use NetPacket::SLL2;

my $sll_obj = NetPacket::SLL2->decode($raw_pkt);
my $sll_pkt = $sll_obj->encode();
my $sll_data = NetPacket::SLL2::strip($raw_pkt);

💜 DESCRIPTION 💜

NetPacket::SLL2 gives you a whole little set of routines for assembling and disassembling packets using Linux cooked capture (libpcap SLL2). Linux cooked capture is a pseudo-link-layer that libpcap uses when it's capturing packets on the "any" device — because those packets may have different link layer headers, bestie — or when the native link layer headers can't be used. it's giving "we made a flexible little container for chaos." 💅

for more details on the SLL2 protocol, peek at https://gitlab.com/wireshark/wireshark/-/wikis/SLL and https://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL2.html. 🦋

💅 Methods 💅

• NetPacket::SLL2->decode([RAW PACKET]) — decodes the raw packet data you give it and returns an object containing instance data. okay so real talk: this method will quite happily decode garbage input 😭. it is the responsibility of the programmer to ensure valid packet data is passed to this method. no vibes-based packet validation here, bestie.
• $sll_obj->encode() — returns an SLL2 packet encoded with the instance data specified. slay, it puts the little packet back together. ✨

🧚 Functions 🧚

• NetPacket::SLL2::strip([RAW PACKET]) — returns the encapsulated data (or payload) contained in the SLL2 packet. this data is suitable to be used as input for other NetPacket::* modules. it's literally the payload bestie, ready to hand off. 🫶

this function is equivalent to creating an object using the decode() constructor and returning the data field of that object. iykyk. 💖

🍓 Instance data 🍓

the instance data for the NetPacket::SLL2 object consists of the following fields. periodt.

• proto — the protocol type for the packet. usually an ethernet protocol type, but the meaning depends on the device type as described at https://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL2.html. 🦋
• interface — the 1-based index of the interface this packet was observed on. yes, 1-based, not 0-based — stay strong. 💅
• htype — the device type as a Linux ARP hardware type (https://www.iana.org/assignments/arp-parameters/arp-parameters.xhtml). 🎀
• type — the SLL packet type. the vibes are:

# SLL_TYPE_UNICAST
0, if the packet was specifically sent to us by somebody else;
# SLL_TYPE_BROADCAST
1, if the packet was broadcast by somebody else;
# SLL_TYPE_MULTICAST
2, if the packet was multicast, but not broadcast, by somebody else;
# SLL_TYPE_SENT_TO_OTHER
3, if the packet was sent to somebody else by somebody else;
# SLL_TYPE_SENT_BY_US
4, if the packet was sent by us.

• src_addr — up to the first 8 bytes of the source link-layer address for this packet as a hex string. hex string bestie, not a whole address novel. 🔥
• data — the encapsulated data (payload) for this SLL2 packet. the main character payload, honestly. 👑

🌈 Exports 🌈

• default — none.
• tags — the following tags group together related exportable items.
  • :types — re-exported from NetPacket::SLL for convenience.
  • :strip — import the strip function sll2_strip.
  • :ALL — all the above exportable items.

🙈 EXAMPLE 🙈

the following script prints the source address, device type, and protocol type of each packet to standard output. cute, useful, iconic. 💖

#!/usr/bin/perl

use strict;
use warnings;
use Net::PcapUtils;
use NetPacket::SLL2;

sub process_pkt {
    my ($user, $hdr, $pkt) = @_;
    my $sll_obj = NetPacket::SLL2->decode($pkt);
    print("$sll_obj->{src_addr} $sll_obj->{htype} $sll_obj->{proto}\n");
}

Net::PcapUtils::loop(\&process_pkt);

💀 COPYRIGHT 💀

Copyright (c) 2021 Dan Book.

this module is free software. you can redistribute it and/or modify it under the terms of the Artistic License 2.0. 🎀

this program is distributed in the hope that it will be useful, but without any warranty; without even the implied warranty of merchantability or fitness for a particular purpose. no fake promises, bestie. 🫶

👑 AUTHOR 👑

Dan Book <dbook@cpan.org> — author icon, periodt. 🌟

---

okay bye bestie 💖🫶 this page was made with perl v5.40.1, dated 2026-02-20, and it's the NetPacket::SLL2(3pm) show. mwah 💋✨