> 5) so i remove the filter expression by means of setsockopt > SO_DETACH_FILTER and then regenrate the bpfcode for the nw expression. > > 6) now i do a attach operation on the socket by means of setsockopt and > so attach the new filter. You can just issue a new SO_ATTACH_FILTER and it will swap them over rather than having an 'all packets' time. You will have some buffered frames matching the old filter - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org
