--- ngrep/ngrep.c       Mon Jun 26 14:52:50 2000
+++ ngrep-vac/ngrep.c   Wed Jul  5 12:17:11 2000
@@ -297,8 +297,10 @@
 
   switch(pcap_datalink(pd)) {
   case DLT_EN10MB:
-  case DLT_IEEE802:
     link_offset = ETHHDR_SIZE;
+    break;
+  case DLT_IEEE802:
+    link_offset = 22;
     break;
 
   case DLT_FDDI: