Revert to catching only bogus ethernet addresses that end in a colon,
since the updated expression caught the "4:2" in "ip[4:2]".
diff --git a/scanner.l b/scanner.l
index 5ca72e7..b7cab49 100644
--- a/scanner.l
+++ b/scanner.l
@@ -22,7 +22,7 @@
#ifndef lint
static const char rcsid[] =
- "@(#) $Header: /tcpdump/master/libpcap/scanner.l,v 1.80 2001-08-20 18:24:16 fenner Exp $ (LBL)";
+ "@(#) $Header: /tcpdump/master/libpcap/scanner.l,v 1.81 2001-09-14 01:40:57 fenner Exp $ (LBL)";
#endif
#ifdef HAVE_CONFIG_H
@@ -278,7 +278,7 @@
bpf_error("IPv6 address %s not supported", yytext);
#endif /*INET6*/
}
-({B}:+)+{B}? { bpf_error("bogus ethernet address %s", yytext); }
+{B}:+({B}:+)+ { bpf_error("bogus ethernet address %s", yytext); }
icmptype { yylval.i = 0; return NUM; }
icmpcode { yylval.i = 1; return NUM; }
icmp-echoreply { yylval.i = 0; return NUM; }
