Re: Signed/Unsigned Frag Offset Issue?

[Guy Harris <guy () alum mit edu>]

On Tue, Dec 09, 2003 at 04:15:40PM -0500, Joshua Krage wrote:
> I can't reconcile my results with Guy's bug followup that the bpf driver's
> he has checked treated both the accumulator and constant as unsigned.

The BPF interpreters won't give you the right answer if the code handed
to them asks them to give the wrong answer.

What does

        tcpdump -d 'ip[6:2] & 0x1fff > 0'

print?
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe