Ethereal-dev: Re: [Ethereal-dev] Capturing from multiple interfaces, and why we need this.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Mon, 2 Feb 2004 01:14:37 +0100
On Sun, Feb 01, 2004 at 02:38:00PM -0800, Guy Harris wrote:
> 	2) split "pcap_compile()" into a parser that generates an
> 	   expression tree and code generators that produce programs,
> 	   have a routine that takes an expression tree and a pcap_t and
> 	   either generates code and sets a filter or fails if it can't
> 	   generate code or set the filter, and have multiple code
> 	   generators for different filter engines.

I'd really prefer this solution. The fact that today the syntax for the
(capture) filters is tied to libpcap but shouldn't be can bee seen in
the location of the capture filter manpage: It's not in the libs manpage
but in the applications manpage (tcpdump).

  Ciao
        Jörg
-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.