Hi Dean, looks good to me. Just a minor optional nit.
Reviewed-by: Luca Vizzarro <luca.vizza...@arm.com> On 06/03/2025 22:47, Dean Marx wrote:
+ #: + l4_dport: int | None = field( + default=None, + metadata=TextParser.find_int(r"(?:Destination TCP port=|Destination UDP port=)(\d+)"), + )
the regex can be simplified: r"Destination (?:TCP|UDP) port=(\d+)"