[tcpdump-workers] Can't install an inbound/outbound filter in the Linux kernel ?

2010-03-02 Thread John Cormie
I've noticed that using either the inbound or outbound keyword in my capture expression results in a filter that cannot be installed in the kernel and gets processed in user mode instead. I believe the problem is that these filters generate BPF code that pcap-linux.c:fix_program() is unable to rewr

[tcpdump-workers] Can't install an inbound/outbound filter in the Linux kernel ?

2010-03-01 Thread John Cormie
I've noticed that using either the inbound or outbound keyword in my capture expression results in a filter that cannot be installed in the kernel and gets processed in user mode instead. I believe the problem is that these filters generate BPF code that pcap-linux.c:fix_program() is unable to rewr