[tcpdump-workers] bpf filtering for new DLT type

[Lidwa, Eric (GSFC-582.0)[SGT INC]]

I am trying to find information on what is needed to implement bpf filtering 
for a new DLT type (in my case DLT_AOS).

Initially I added to gencode.c in libpcap the following:

                case DLT_AOS:
                /*
                 * Currently, only raw "link[N:M]" filtering is supported.
                 */
                off_linktype = -1;
                off_macpl = -1;
                off_nl = -1;
                off_nl_nosnap = -1;
                return;

Now I would like to implement bpf filtering for AOS protocol. Could somebody 
please point me to info on the steps to take? Would this require rebuilding of 
the kernel (I am on linux)?

Do I need to modify grammar.y and scanner.l ? If yes, what else needs to be 
done?

Regards,
Eric
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.