tcpdump mailing list archives

Re: "not vlan" filter expression broken catastrophically!


From: Ani Sinha <ani () aristanetworks com>
Date: Fri, 1 Feb 2013 17:16:40 -0800

In this case, I have used a tool written by Bill Fenner called
BpfExpression for Arista. Not sure if the code is GNU licensed. He's
in the mailing list and I will let him comment.

ani


On Fri, Feb 1, 2013 at 5:07 PM, Michael Richardson <mcr () sandelman ca> wrote:

"Ani" == Ani Sinha <ani () aristanetworks com> writes:
    Ani> hello folks :

    Ani> As you guys have been aware, I am hacking libpcap for a
    Ani> while. Me and Bill noticed something seriously broken for any
    Ani> filter expression that has a "not vlan" in it. For example,
    Ani> take a look at the filter code generated by libpcap with an
    Ani> expression like "not vlan and tcp port 80" :

    Ani> BpfExpression '(not vlan and tcp port 80)' { 0x28, 0, 0,

Do we have any way to test libpcap expression outputs other than -d
options to tcpdump?  I'm thinking regression tests here.

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     mcr () sandelman ca  http://www.sandelman.ca/        |   ruby on rails    [

_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Current thread: