On Jul 7, 2025, at 3:29 AM, Denis Ovsienko <[email protected]> wrote:
> Yes, and that version could be the same old pcap_compile() if the > pcap_t contained the compilation style requests, as it already contains > the link-layer type and the snapshot. But that still requires pcap_open_dead(), which is somewhat of a greasy hack, as far as I'm concerned. If all you're using libpcap for is to generate cBPF code, a pcap_t seems to be extra baggage. _______________________________________________ tcpdump-workers mailing list -- [email protected] To unsubscribe send an email to [email protected] %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s
