tcpdump mailing list archives

The magic that is with struct block and merge(), backpatch() and such...


From: "Auke Folkerts" <auke.folkerts () gmail com>
Date: Mon, 9 Apr 2007 23:12:22 +0200

Hello,


For a school project I am currently delving deep into the tcpdump (and
libpcap) source code. The goal is to create a program that uses the
same expression language as tcpdump but using a different backend.

I have examined the scanner.l and grammer.y files. The grammer rules
are clear, but I do not quite understand the abstract syntax tree that
is built in the actions of the grammar rules.

Could someone explain (or point me in the right direction on) how
those blocks contain the information that is supplied in the
command-line expression?

Especially the backpatching and merging of the block-structures and
thus forming 'and' or 'or' conditions seems like black magic so far.
Can anyone enlighten me please?

Any help is greatly appreciated!

With kind regards,
--
Auke Folkerts
Computer Science Student
Vrije Universiteit Amsterdam
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: