Re: [tcpdump-workers] hello

2012-09-05 Thread George Bakos
Lovgate worm. On Wed, 5 Sep 2012 17:07:01 +0800 rene.p...@ftw.at wrote: > Mail failed. For further assistance, please contact! > -- ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpd

[tcpdump-workers] Modular arithmetic

2012-09-05 Thread George Bakos
I don't see any discussion regarding adding modular operations to pcap, i.e. "header[offset:width] % 4 != 0". I've put together a patch that compiles & honors that (at least on the few systems I've tried), but was wondering if there were any fundamental reason to avoid it? Thanks. g __

Re: [tcpdump-workers] Modular arithmetic

2012-09-06 Thread George Bakos
16] (003) sub #20 (004) mod #5 (005) jeq #0x0 jt 10 jf 6 (006) ldb [20] (007) and #0x20 (008) jeq #0x20jt 9jf 10 (009) ret #65535 (010) ret #0 On Wed, 5 Sep 2012 16:19:11 -0700 Guy Harris wrote: > > On Sep 5, 2012

Re: [tcpdump-workers] [PATCH net-next] filter: add MOD operation

2012-09-08 Thread George Bakos
Here's a patch to libpcap-1.3 to test against. I still need to include changes to man pages. g On Sat, 08 Sep 2012 10:03:35 +0200 Eric Dumazet wrote: > From: Eric Dumazet > > On Fri, 2012-09-07 at 20:03 -0700, Andi Kleen wrote: > > On Fri, Sep 07, 2012 at 07:49:10AM +