 | 1 | initial version |
Frame contains "text"
That would require looping over the contents of the frame. Looping is NOT supported by capture filters, as they may be run in the OS kernel, and the developers of BPF didn't want to allow user-mode code to force the kernel to loop.
If the text is at a fixed offset in the frame, that can be done with a capture filter, although the filters are (currently) somewhat complicated to construct.
