Guy Harris

> I wish I could simply use the 'llc' filter, but it gets rejected with this message : 'llc' supported only on raw ATM > > tcpdump version 4.9.0 >...

> As the packet has a LLC EtherType, you can use those filters: You can, with libpcap 1.6.1 or later (unless you're capturing on raw ATM, which you almost certainly...

> Does someone want to assign it to me? Done.

We have the -C option, giving a file size in megabytes (real megabytes, i.e. 1,000,000 bytes, not 1,048,576 bytes); once the file gets that big, tcpdump switches to a new...

Fortunately, --limit-file-size isn't yet in tcpdump, so we can make its behavior whatever we want it to be. How about making its size default to megabytes (as in "1,000,000 bytes"),...

Slightly easier way to parse numerical arguments possibly followed by a suffix: - Use `strtol()` or `strtoul()`, with a base of 10. It'll provide a pointer to the first character...

Our style puts spaces around assignment operators and after commas that separate arguments, so do `l = strtol(x, &e, 10);`. Also, right _after_ you do that, fail if `x ==...

This is the result of adding [SAL annotations](https://docs.microsoft.com/en-us/cpp/c-runtime-library/sal-annotations?view=msvc-170) to Npcap's Packet32.h in nmap/npcap@a22a54788a7cb8ad6ba984a076316f9961018e22. Visual Studio should be able to handle them, but it appears that MinGW-w32 can't. If this is...

Or just include sal.h in Packet32.h. That may break builds with older versions of MinGW-w32 without sal.h - or, rather, make the problem more obvious, by failing to include sal.h...

It would probably be handled similarly to the way `port` is handled, so it might be something such as `vlanrange 2001-2006 or 1506-1507 or 1552-1553 or 2025-2026`.