[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: BPF memstore and bpf_validate_ext()
Alexander Nasonov <alnsn%yandex.ru@localhost> wrote:
> Mindaugas Rasiukevicius wrote:
> > Moreover, the usual byte-code produced by tcpdump/pcap does not
> > even use the memory store so you optimisations would most of the
> > time be applicable anyway!
> This is not always the case. For instance,
> # tcpdump -y IEEE802_11 -i urtwn0 -d not tcp
> tcpdump: data link type IEEE802_11
I am aware of these cases, but I optimise for 80%, not 20%.
Main Index |
Thread Index |