On Tue, 23 Jun 2026 13:57:35 +0000 Marat Khalili <[email protected]> wrote:
> Thank you for working on this, please see some comments inline. I think it is still worth keeping the tests split into two. One test just make sure that some basic filters work as expected (match vs not match). The other one is just doing its job by causing pcap_compile() to generate more complex and different code. Since the packet we are feeding it is just a dummy packet, I suspect all of the filters will be false. Let me recheck, if so then can look at return value.

