Date: Wed, 24 Nov 1999 14:55:34 -0800 (PST) From: Julian Elischer <julian@whistle.com> To: Bakul Shah <bakul@torrentnet.com> Cc: "Louis A. Mamakos" <louie@TransSys.COM>, "Rodney W. Grimes" <rgrimes@gndrsh.dnsmgr.net>, Tony Landells <ahl@austclear.com.au>, ipfw@FreeBSD.ORG, arch@FreeBSD.ORG Subject: Re: new IPFW Message-ID: <Pine.BSF.4.10.9911241451540.11412-100000@current1.whistle.com> In-Reply-To: <199911242242.RAA13782@chai.torrentnet.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 24 Nov 1999, Bakul Shah wrote: > > It worked quite well. The one extension which would be valuable is more > > an extension of the BPF expression compiler rather than the engine itself; > > if would be valuable to be able to return a value from the BPF-engine > > program so that it could be acted on. The engine itself has this capability, > > but the existing tcpdump intended expression compiler doesn't currently > > have syntax to support it. > > What would be neat is an extensible filter language that maps > symbolic names to a filter expression on packet fields as > well as a printer language that allows specifying how things > get printed. Right now you have to extend tcpdump's print > routines for the latter. Also, there is no good reason why > the print routines shouldn't be in a library like libpcap so > that tcpdump is just a main program relying almost completely > on a library. We've been doing some work on something similar but I had never thought of trying to apply it to bpf... hmmmmm. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-ipfw" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9911241451540.11412-100000>