Hi Ethy :)
* Ethy H. Brito <ethy.brito@xxxxxxxxxxxx> dixit:
> match u16 0x0000 0xffb0 at 2
>
> With this match he says that packet with less than 80 bytes will match the rule.
That's right.
> Well, 0xffb0 translates to 1111 1111 1011 0000 (which is -80 BTW).
It is a mask, not a number (and certainly not a signed one), so
there's no point in considering it -80. It is just a mask.
> Am I correct or I completely misunderstood it?
You're right, packet sizes between 16 and 63 (both included)
won't match the rule.
Raúl Núñez de Arenas Coronado
--
Linux Registered User 88736 | http://www.dervishd.net
http://www.pleyades.net & http://www.gotesdelluna.net
It's my PC and I'll cry if I want to...
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
