This may not be the right group, but I have a few BPF questions that I
hope you can answer:
* What is the maximum size of a BPF expression that can be passed to
tcpdump and pcap_compile()? Some of the BPF expressions I've observed
are over 1024 characters and I wonder what the limt is (if any)?
* What is the maximum level of nesting for BPF expressions for tcpdump
and pcap_compile()? Currently, I'm observing nesting levels of 10 or
more.
* Are there BPF expressions for "nested" vlans?
Thanks much.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
