Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Nov 1999 17:42:38 -0500
From:      Bakul Shah <bakul@torrentnet.com>
To:        "Louis A. Mamakos" <louie@TransSys.COM>
Cc:        "Rodney W. Grimes" <rgrimes@gndrsh.dnsmgr.net>, ahl@austclear.com.au (Tony Landells), ipfw@freebsd.org, arch@freebsd.org
Subject:   Re: new IPFW 
Message-ID:  <199911242242.RAA13782@chai.torrentnet.com>
In-Reply-To: Your message of "Wed, 24 Nov 1999 17:31:30 EST." <199911242231.RAA21036@whizzo.transsys.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> It worked quite well.  The one extension which would be valuable is more
> an extension of the BPF expression compiler rather than the engine itself;
> if would be valuable to be able to return a value from the BPF-engine
> program so that it could be acted on.  The engine itself has this capability,
> but the existing tcpdump intended expression compiler doesn't currently
> have syntax to support it.

What would be neat is an extensible filter language that maps
symbolic names to a filter expression on packet fields as
well as a printer language that allows specifying how things
get printed.  Right now you have to extend tcpdump's print
routines for the latter.  Also, there is no good reason why
the print routines shouldn't be in a library like libpcap so
that tcpdump is just a main program relying almost completely
on a library.




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199911242242.RAA13782>