/usr/include/pcap/bpf.h源码

#ifdef MSDOS //must be 32-bit
typedef long 			bpf_int32;
typedef unsigned long 	bpf_u_int32;
#else
typedef int 	bpf_int32;
typedef u_int	bpf_u_int32;

//structure for "pcap_compile()", "pcap_setfilter()", etc...
struct bpf_program{
	u_int bf_len;
	struct bpf_insn *bf_insns;
}

//the instruction data structure
struct bpf_insn{
	u_short	code;
	u_char	jt;
	u_char	jf;
	bpf_u_int32 k;
};