tcpdump mailing list archives
BPF questions...
From: barcaroller <barcaroller () gmail com>
Date: Sat, 21 May 2011 12:09:33 -0400
This may not be the right group, but I have a few BPF questions that I hope you can answer:
* What is the maximum size of a BPF expression that can be passed to tcpdump and pcap_compile()? Some of the BPF expressions I've observed are over 1024 characters and I wonder what the limt is (if any)?
* What is the maximum level of nesting for BPF expressions for tcpdump and pcap_compile()? Currently, I'm observing nesting levels of 10 or more.
* Are there BPF expressions for "nested" vlans? Thanks much. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- BPF questions... barcaroller (May 21)
- Re: BPF questions... Guy Harris (May 21)