University of Cambridge > > REMS lunch > Modelling pcap expressions

Modelling pcap expressions

Add to your list(s) Download to your calendar using vCal

If you have a question about this talk, please contact Peter Sewell.

Pcap expressions are the de facto language for specifying packet filters. Standard tools like tcpdump, wireshark, and ngrep, are given pcap expressions like “(not host sandy) and dst portrange 22-25”, conveniently describing what traffic the user is interested in.

Like many real-world systems, pcap is informally specified and has ad hoc design extensions. Unfortunately, even a small language like pcap can yield unexpected (and usually unwanted) behaviour.

In this talk I describe ongoing work to model pcap expressions, the challenges and surprises therein, and how such a model could support building better language-based tools for networking.

This talk is part of the REMS lunch series.

Tell a friend about this talk:

This talk is included in these lists:

Note that ex-directory lists are not shown.


© 2006-2024, University of Cambridge. Contact Us | Help and Documentation | Privacy and Publicity