The Linux cooked-mode capture (SLL) is a pseudo-protocol that is the result when capturing in Linux on the "any" device interface.
More information on the SLL can be found under :
https://wiki.wireshark.org/SLL
http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL.html