Subject: Re: tcpdump/libpcap and variable length link level headers
To: None <tech-net@netbsd.org>
From: Ignatios Souvatzis <is@jocelyn.rhein.de>
List: tech-net
Date: 10/07/1999 22:39:20
On Wed, Oct 06, 1999 at 10:15:01PM +0200, Ignatios Souvatzis wrote:
> I'm thinking about how to do libpcap matching for ARCnet.
>
> ...
>
> My unready thoughts
Version 2:
- teach tcpdump/libpcap to create code that
uses a "MEM" location which holds the nonll-offset everywhere.
- furthermore, depending on the interface, code that initializes this to
a constant (for Ethernet etc.) or to query the packet and compute the offset
(for ARCnet)
- hope that the BPF bytecode optimizer knows how to make it fast in the first
case.
Does this sound better?
-is