[tcpdump-workers] protochain, BPF_JA, and sk_chk_filter

linux+v2.6.26.5/net/core/filter.c#L409) the comparison succeeds because the large unsigned k-value for this instruction (0xfff0) is much larger than the number of remaining bpf instructions (flen-pc-1). is this a bug in libpcap's protochain filter generation code? -- Robert Edmonds [EM

Re: [tcpdump-workers] protochain, BPF_JA, and sk_chk_filter

On 2008-09-18, Guy Harris <[EMAIL PROTECTED]> wrote: > > On Sep 17, 2008, at 2:26 PM, Robert Edmonds wrote: > >> the comparison succeeds because the large unsigned k-value for this >> instruction (0xfff0) is much larger than the number of remaining >&g

Re: [tcpdump-workers] How to tell if application is handling packets

SONAME since. libpcap0.8 (0.9.3-1) unstable; urgency=low * New upstream release: this is a new major version of libpcap but it is API and ABI compatible with libpcap0.8 so the old soname and package names were kept to avoid uncessary transition of all packages. [...] -- Romain Fr

[tcpdump-workers] allow cooked mode on linux ethernet devices

few months back: http://sourceforge.net/tracker/?func=detail&atid=469579&aid=3078313&group_id=53067 could someone please look at this and tell me if the patch needs more work or if it can be merged to mainline? thanks. -- Robert Edmonds edmo...@debian.org - This is the tcpdump-wor