Re: [tcpdump-workers] Libpcap-1.4.0 BPF_AND not filtering as exected

2014-11-10 Thread Aparna Nagarajan
There seems to be a bug in libpcap version 1.4.0 . The same code works good in 1.6.2 :) Thanks a lot. Aparna N On 6 November 2014 13:56, Aparna Nagarajan wrote: > Hi Guy Harris, > > Here is the translated code. > > /*initialization*/ > static u_int off_didx = 5;

Re: [tcpdump-workers] Libpcap-1.4.0 BPF_AND not filtering as exected

2014-11-06 Thread Aparna Nagarajan
ype)); ===> { 0x15, 0, 1,0x0100 } a jump statement to compare value in didx with value in A. Thanks and Regards, Aparna On 6 November 2014 13:04, Guy Harris wrote: > > On Nov 5, 2014, at 10:41 PM, Aparna Nagarajan > wrote: > >>> >>> Hi All, >>> >&g

[tcpdump-workers] Libpcap-1.4.0 BPF_AND not filtering as exected

2014-11-05 Thread Aparna Nagarajan
> > Hi All, > > I am trying to add some BPF code for capture filters. > > I am basically trying to load data into accumilator from some offset, > Mask it and them match it with some value. > > Here is the OPcode: > > { 0x20, 0, 0, 0x0013 }, { 0x54, 0, 0, 0x0ffc }, { 0x15, 0, 1, > 0x0100