Re: Max lines in filter

[Jefferson Ogata <Jefferson.Ogata () noaa gov>]

Keplinger, Michael A wrote:
> Thanks for the responses thus far.
>
> We are using Libpcap version 0.4
> and tcpdump v3.4
>
> which is the same that Guy Harris had when his crashed.  It may be difficult to upgrade due to our Customer (contract gig).  
> i'll see if I can work around it.

See

    http://www.tcpdump.org/lists/workers/2000/msg01364.html

for an explanation as well as a patch.

It would be really wise to upgrade if possible, not only to fix things like 
these but also to protect against remote vulnerabilities.

> Thanks
>
> -----Original Message-----
> From: Jefferson Ogata [mailto:Jefferson.Ogata () noaa gov]
> Sent: Monday, December 09, 2002 16:37
> To: tcpdump-workers () tcpdump org
> Subject: Re: [tcpdump-workers] Max lines in filter
>
>
> Keplinger, Michael A wrote:
>
> > Does anybody know if there is a maximum number of lines that you can 
> > have in a tcpdump filter, I am getting segmentation fault when the 
> > number of lines approaches 100.
>
>
> What version of tcpdump and libpcap? There is an bug in older versions of the 
> code generator.



--
Jefferson Ogata <Jefferson.Ogata () noaa gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt () noaa gov>

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe