tcpdump mailing list archives

Re: convert back to expression


From: Guy Harris <guy () alum mit edu>
Date: Tue, 20 Jul 2004 12:52:43 -0700


On Jul 20, 2004, at 1:32 AM, Li Ruzhen wrote:

hi, whether i can use libpcap to optimize some
complicate expressions and then conver the optimized
result back to the expression format?

If by "expressions" you mean filter expressions, no, you can't - there's no code that takes a BPF program (which is the output of the compiler, including the optimizer) and turns it back into a filter expression.

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Current thread: