From mboxrd@z Thu Jan  1 00:00:00 1970
From: Sam <sah@softcardsystems.com>
To: <9fans@cse.psu.edu>
Subject: Re: [9fans] snoopy bug?
In-Reply-To: <1bfc0c19a25c1d39dc2bbe3bada4e979@plan9.bell-labs.com>
Message-ID: <Pine.LNX.4.30.0301231547090.7365-100000@athena>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Date: Thu, 23 Jan 2003 15:49:20 -0500
Topicbox-Message-UUID: 4640fe9c-eacb-11e9-9e20-41e7f4b1d025

Ah, ok.  I got turned around by the following example
in the man page.  That makes more sense.

% snoopy -f 'arp || bootp'
after optimize: ether( arp || ip( udp( bootp ) ) )

Thanks,

Sam

On Thu, 23
Jan 2003, Russ Cox wrote:

> i would argue that this is a syntax error misdiagnosed.
> t=0x88a2 means nothing unless you say what kind of
> packet the field is in.
>
> snoopy -f 'ether(t=0x88a2)'
>
> does what you want.
>