Re: BPF memstore and bpf_validate_ext()

[Mindaugas Rasiukevicius <rmind%netbsd.org@localhost>]

Alexander Nasonov <alnsn%yandex.ru@localhost> wrote:
> Mindaugas Rasiukevicius wrote:
> > Moreover, the usual byte-code produced by tcpdump/pcap does not
> > even use the memory store so you optimisations would most of the
> > time be applicable anyway!
> 
> This is not always the case. For instance,
> 
> # tcpdump -y IEEE802_11 -i urtwn0 -d not tcp
> tcpdump: data link type IEEE802_11
> <...>

I am aware of these cases, but I optimise for 80%, not 20%.

-- 
Mindaugas