Gianluca Varenni wrote:
I already noticed that the new BPF code doesn't check the
link-type in the PPI header properly: the check against the linktype
should be done before checking if the frame is a data frame.
Should any packets with a linktype other than DLT_IEEE802_11_RADIO pass
the filter? (If so, that would significantly complicate the BPF
compiler, as it'd have to generate code for multiple linktypes in the
same program.)
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
