Alexander Nasonov <al...@yandex.ru> wrote: > Mindaugas Rasiukevicius wrote: > > Moreover, the usual byte-code produced by tcpdump/pcap does not > > even use the memory store so you optimisations would most of the > > time be applicable anyway! > > This is not always the case. For instance, > > # tcpdump -y IEEE802_11 -i urtwn0 -d not tcp > tcpdump: data link type IEEE802_11 > <...>
I am aware of these cases, but I optimise for 80%, not 20%. -- Mindaugas
