University of Cambridge > Talks.cam > REMS lunch > Modelling pcap expressions

Modelling pcap expressions

Download to your calendar using vCal

If you have a question about this talk, please contact Peter Sewell .

Pcap expressions are the de facto language for specifying packet filters. Standard tools like tcpdump, wireshark, and ngrep, are given pcap expressions like “(not host sandy) and dst portrange 22-25”, conveniently describing what traffic the user is interested in.

Like many real-world systems, pcap is informally specified and has ad hoc design extensions. Unfortunately, even a small language like pcap can yield unexpected (and usually unwanted) behaviour.

In this talk I describe ongoing work to model pcap expressions, the challenges and surprises therein, and how such a model could support building better language-based tools for networking.

This talk is part of the REMS lunch series.

This talk is included in these lists:

Note that ex-directory lists are not shown.

 

Š 2006-2025 Talks.cam, University of Cambridge. Contact Us | Help and Documentation | Privacy and Publicity