On Sat, Feb 24, 2001 at 10:21:43AM -0800, Bill Fenner wrote:
> > icmp[icmptype] = icmp-unreach
> > (tcp[tcpflags] & tcp-syn) != 0
>
> Shoot, when I read the description I was hoping it was going to be
> one level further, e.g. icmptype = icmp-unreach or
> (tcpflags & tcp-syn) != 0.
I thought about that, but it didn't look like making the parser deal with
that would be doable without what I considered to be a yucky hack.
...basically, I didn't really like the idea of adding these special keywords
that caused so many basic blocks to be created. The parser is pretty general
purpose right now, and I felt that such a change would be going in the wrong
direction.
--
-- Jason R. Thorpe <[EMAIL PROTECTED]>
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe