ParentFull threadtptacek·No, tcpdump uses libpcap to filter, and libpcap compiles down to BPF.View on HN