From owner-freebsd-net Wed May 2 0:37:12 2001 Delivered-To: freebsd-net@freebsd.org Received: from mercury.Sun.COM (mercury.Sun.COM [192.9.25.1]) by hub.freebsd.org (Postfix) with ESMTP id 138D837B423 for ; Wed, 2 May 2001 00:37:07 -0700 (PDT) (envelope-from Casper.Dik@Sun.COM) Received: from romulus.Holland.Sun.COM ([129.159.204.5]) by mercury.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id AAA06698; Wed, 2 May 2001 00:36:58 -0700 (PDT) Received: from holland (room101 [129.159.201.52]) by romulus.Holland.Sun.COM (8.9.3+Sun/8.9.3/ENSMAIL,v2.1p1) with ESMTP id JAA16563; Wed, 2 May 2001 09:36:56 +0200 (MEST) Message-Id: <200105020736.JAA16563@romulus.Holland.Sun.COM> To: Darren Reed Cc: gunther@aurora.regenstrief.org (Gunther Schadow), snap-users@kame.net, freebsd-net@freebsd.org, ipfilter@coombs.anu.edu.au, altq@csl.sony.co.jp Subject: Re: (KAME-snap 4587) The future of ALTQ, IPsec & IPFILTER playing together ... In-reply-to: Your message of "Wed, 02 May 2001 08:00:40 +1000." <200105012200.IAA22724@avalon.reed.wattle.id.au> Date: Wed, 02 May 2001 09:36:56 +0200 From: Casper Dik Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >BPF uses a byte-code language, like Java, to tell the >matching routine what bits to compare and return a "true or >false". i.e. you need to build things around it if you want >to use it for packet matching, etc. BPF doesn't seem to lend itself to "keeping state" either. It's a packet filtering language that has no provisions for keeping external state, AFAIK. Casper To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message