I tried it on Windows XP, I removed the extra blanks but I still get a parse error. In every case, windump doesn't crash. By the way, why not compressing the huge amount of "tcp port XXX" with range checks on tcp[0:2] and tcp[2:2]? It should produce simpler and more efficient filters.
Loris > On Mon, Mar 24, 2003 at 03:32:26PM -0800, Guy Harris wrote: > > Infinite, or just "more than there's room for in the stack"? A stack > > overflow does not necessarily imply infinite recursion. > > I tried that same filter (after removing extra blanks and "!"s that > somehow had gotten inserted into the file) with the current CVS libpcap > (which isn't much different from WinPcap 3.0 beta - especially not in > that part of the BPF code generator/optimizer) on Solaris, and it didn't > crash. It might be that the stack limit was larger on Solaris than on > the version of Windows on which it crashed. > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED] > ================================================================== > ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
