fix protocol alone, add composite

packetcap / go-pcap

Packet capture library and tools in native go

Apache License 2.0

14 stars 4 forks source link

Closed deitch closed 4 years ago

deitch commented 4 years ago

Several things:

Lone sub-protocol, e.g. "udp", would have an error. Fixes that and several similar issues.
Basic composite, e.g. "udp and port 25" or "host 10.100.100.100 or port 16"

The composite remains inefficient, especially when just one field is different. Further optimizations to follow.