====== PlayGround ====== ====== strange libpcap ====== ===== OK ===== correct code - 6 commands # tcpdump -d -p udp (000) ldh [12] (001) jeq #0x800 jt 2 jf 5 (002) ldb [23] (003) jeq #0x11 jt 4 jf 5 (004) ret #68 (005) ret #0 | i386 | 6.1-RELEASE-p2 | | i386 | 6.2-STABLE #1: Thu May 17 23:10:03 MSD 2007 | | i386 | 7.0-CURRENT #2: Sat May 26 21:46:39 MSD 2007 | | amd64 | 6.2-RC1 #0: Thu Dec 21 18:23:01 UTC 2006 | | amd64 | 6.2-STABLE #0: Mon Mar 5 14:56:51 MSK 2007 | ===== FILED ===== bad code - 9 commands # tcpdump -d -p udp (000) ldh [12] (001) jeq #0x86dd jt 2 jf 4 (002) ldb [20] (003) jeq #0x11 jt 7 jf 8 (004) jeq #0x800 jt 5 jf 8 (005) ldb [23] (006) jeq #0x11 jt 7 jf 8 (007) ret #96 (008) ret #0 | amd64 | 6.2-RELEASE | | amd64 | 6.2-STABLE #0: Mon Apr 16 21:24:48 MSD 2007 | | i386 | 6.0-STABLE #0: Sun Dec 18 19:59:07 MSK 2005 |