Date: Wed, 2 May 2001 17:26:47 -0700 From: Jason R Thorpe <thorpej@zembu.com> To: snap-users@kame.net Cc: gunther@aurora.regenstrief.org, darrenr@reed.wattle.id.au, julian@elischer.org, freebsd-net@freebsd.org, ipfilter@coombs.anu.edu.au, altq@csl.sony.co.jp Subject: Re: (KAME-snap 4633) Re: The future of ALTQ, IPsec & IPFILTER playing together ... Message-ID: <20010502172647.D21020@dr-evil.shagadelic.org> In-Reply-To: <200105030001.KAA24308@avalon.reed.wattle.id.au>; from darrenr@reed.wattle.id.au on Thu, May 03, 2001 at 10:01:18AM %2B1000 References: <20010502162327.Z21020@dr-evil.shagadelic.org> <200105030001.KAA24308@avalon.reed.wattle.id.au>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, May 03, 2001 at 10:01:18AM +1000, Darren Reed wrote:
> > BPF "expressions" are literally BPF bytecodes.
>
> Well, one of the goals of IPFilter is it can parse (as rules) a textual
> representation of what's currently loaded into the kernel. At the moment
> that means collecting hex output, as the bytecode instructions are less
> suited to being displayed all on the one line.
For BPF bytecodes, that's problematic -- the optimizer often turns what
you originally had into something almost totally non-decompilable :-)
--
-- Jason R. Thorpe <thorpej@zembu.com>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010502172647.D21020>