On Fri, Feb 20, 2015 at 15:08 -0800, you wrote:
> newer libpcap version - now the build fails because of > pcap_offline_filter: Oh, I thought that's a function which had been around for a while. That's not easy to get rid of, it provides BPF filtering for packet source plugins that can't do that natively (like netmap). Do you happen to know if there's another way to do that with older pcaps? Robin -- Robin Sommer * ICSI/LBNL * ro...@icir.org * www.icir.org/robin _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev