Please take this discussion to the tcpdump-workers list.
shohamp writes:
> This commit by @yuguy explains this issue very well. yacc parsers the
> bpf from left to right without saving the state, and doesn't provide a
> tree of some kind, which would allow an easy solution. @yuguy say
Hi,
I wonder if libpcap can somehow affect speed of processing packets by TCP/IP
stack?
I noticed that such behavior can happen in particular Linux environments with
high traffic load - without capturing all is Ok, with capturing (especially on
"any" interface) it seems that packets stuck in
01.10.2013, 06:11, "Michael Richardson" :
> from
> https://github.com/the-tcpdump-group/tcpdump/issues/333
>
> details an issue where differences in arch and compiler result in different
> extractions of floating point objects in LMP packets. Guy discovers it has
> something to do with assumptions
