Wireshark-bugs: [Wireshark-bugs] [Bug 11668] extcap: capture filter should be validated by the e

Date: Tue, 21 Jun 2016 13:03:32 +0000

changed bug 11668


What Removed Added
CC   [email protected]

Comment # 6 on bug 11668 from
In some cases, the extcap could not be able to validate the filter.

An example is sshdump: it launches a remote capture binary that can have a
filter. The default binary is dumpcap, but you can use a binary of your choice,
that can support some esoteric filter. The gui gets it from the user, and the
extcap gives it to the capture binary. No way to validate unless it's
tshark/dumpcap/tcpdump or some BPF-based binary.


You are receiving this mail because:
  • You are watching all bug changes.