Re: activities report for July 2026

[Denis Ovsienko <denis () ovsienko info>]

On Sun, 2 Aug 2026 16:24:33 -0700
Guy Harris <gharris () sonic net> wrote:

> Somebody who wants to capture TCP packets and wants the packets to be
> cut off after the first 20 bytes of TCP *payload*, especially if
> they're running on a link layer that has a variable-length header?
>
> Or just "...after the first 20 bytes of IPv4 header" with a
> variable-length link-layer header?

In these use cases "ret" [a] seems to fit better because if the
return value is a sum of several components, it most likely will be in A
after the required number of "add x" and "add #k".

> (No API support for that in libpcap, though. They'd have to write
> their own filter code.)

For somebody who is prepared to do that an additional "txa" hardly
makes the task any more difficult.

-- 
    Denis Ovsienko
_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s