On Jul 7, 2025, at 3:29 AM, Denis Ovsienko <de...@ovsienko.info> wrote:
> Yes, and that version could be the same old pcap_compile() if the > pcap_t contained the compilation style requests, as it already contains > the link-layer type and the snapshot. But that still requires pcap_open_dead(), which is somewhat of a greasy hack, as far as I'm concerned. If all you're using libpcap for is to generate cBPF code, a pcap_t seems to be extra baggage. _______________________________________________ tcpdump-workers mailing list -- tcpdump-workers@lists.tcpdump.org To unsubscribe send an email to tcpdump-workers-le...@lists.tcpdump.org %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s
