Re: Improving the data supplied by BPF

[David Young <dyoung%pobox.com@localhost>]

On Sat, Dec 27, 2008 at 12:38:12AM +1100, Darren Reed wrote:
> Arnaud Lacombe wrote:
> >Darren wrote:
> >>  */
> >> #define        EBPF_OUT                0x00000001      /* Transmitted
> >> packet */
> >>
> > I guess there will also be EBPF_IN, do you forsee any other flag possible ?
> 
> How do you know if something is black?
> 
> If EBPF_OUT isn't set to indicate out, doesn't that
> then imply that the packet is an "input" packet?

It could mean "don't know" or "don't care".  It is the sort of
thing that deserves to be spelled out in documentation.

Dave

-- 
David Young             OJC Technologies
dyoung%ojctech.com@localhost      Urbana, IL * (217) 278-3933