We could possibly make the ip / tcp macro into one macro with maybe an if or case with a regex but it don't think its worth it for readability reasons.
See what you think to the changes then we can tweak.
ip_src / ip_dst as separates doesn't feel good of being part of it either.
We could possibly make the ip / tcp macro into one macro with maybe an if or case with a regex but it don't think its worth it for readability reasons.
See what you think to the changes then we can tweak.
ip_src / ip_dst as separates doesn't feel good of being part of it either.
Regards,
Brian