On Wed, Oct 31, 2012 at 5:50 PM, Guy Harris <g...@alum.mit.edu> wrote: > > On Oct 31, 2012, at 3:35 PM, Ani Sinha <a...@aristanetworks.com> wrote: > >> yes but if the packet is passed to the filter within libpcap (when we >> are not using the kernel filter) before the reinsertion, > > ...that would be a bug. > > Currently, that bug doesn't exist in the recvfrom() code path, but *does* > appear to exist in the tpacket code path - and that code path also runs the > filter before the SLL header is constructed. That should be fixed.
yes, agreed. _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
