No subject

[Carter Bullard]

Hey David,

   I'm skeptical, if its having problems with
the filter expression in the '-F' file, then the
problem shouldn't go away by making the array
any bigger.

   The '-F filename' command line logic, malloc's a
buffer the size of the file, copies the file into it,
and then calls pcap_compile(), referencing the array.
There really isn't anything else to it.  As a result,
I am going to be very interested in the results of
your experiment ;o)

Carter

Carter Bullard
Principal Consultant
Nortel Networks
320 Park Avenue  16th Floor
New York, New York 10022
Email  cbullard at nortelnetworks.com
Phone +1 212 317 4230
Fax   +1 212 317 4324 

> -----Original Message-----
> From: David Brumley [mailto:dbrumley at goju.Stanford.EDU]
> Sent: Sunday, February 21, 1999 5:01 PM
> To: Carter Bullard
> Cc: Argus (E-mail)
> Subject: RE:
> 
> 
> > Hey David,
> >    The only issue is the Unix MAXSTRLEN issue.
> > Thats really why we supported the, "if its
> > going to be big, put the whole thing in a file",
> > sort of approach.  MAXSTRLEN is normally 256.
> 
> But this effects even with -F in argus_util.c.  I'm gonna try 
> the "lets
> fine out what happens" approach.
> 
> Thanks,
> David
>