Re: activities report for July 2026

[Guy Harris <gharris () sonic net>]

On Aug 2, 2026, at 3:42 PM, Denis Ovsienko <denis () ovsienko info> wrote:

> It would be interesting to know if any non-libpcap use cases that use
> "ret" (from the A register) exist.

Somebody who wants to capture TCP packets and wants the packets to be cut off after the first 20 bytes of TCP 
*payload*, especially if they're running on a link layer that has a variable-length header?

Or just "...after the first 20 bytes of IPv4 header" with a variable-length link-layer header?

(No API support for that in libpcap, though. They'd have to write their own filter code.)
_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s