tcpdump mailing list archives

BPF questions...


From: barcaroller <barcaroller () gmail com>
Date: Sat, 21 May 2011 12:09:33 -0400

This may not be the right group, but I have a few BPF questions that I hope you can answer:

* What is the maximum size of a BPF expression that can be passed to tcpdump and pcap_compile()? Some of the BPF expressions I've observed are over 1024 characters and I wonder what the limt is (if any)?

* What is the maximum level of nesting for BPF expressions for tcpdump and pcap_compile()? Currently, I'm observing nesting levels of 10 or more.

* Are there BPF expressions for "nested" vlans?


Thanks much.


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: