diff --git a/base/pcap-snoop.c.in b/base/pcap-snoop.c.in
index 6f2d75e..76b9908 100644
--- a/base/pcap-snoop.c.in
+++ b/base/pcap-snoop.c.in
@@ -205,6 +205,8 @@ void pcap_cb(u_char *ptr, const struct pcap_pkthdr *hdr, const u_char *data) {
 
   switch(pcap_if_type) {
     case DLT_RAW:
+      type = ETHERTYPE_IP;
+      break;
 #ifdef DLT_LOOP
     case DLT_LOOP:
 #endif