Wireshark-dev: Re: [Wireshark-dev] Add BPF filtering to Wiretap?

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 5 Feb 2007 15:14:35 -0800
On Feb 5, 2007, at 12:11 PM, Gerald Combs wrote:


Would it make sense to add BPF filtering to Wiretap via
pcap_offline_filter()?

Would it make sense to add BPF filtering to Wiretap via bpf_filter(),  
which is available in all version of libpcap (and depended on by at  
least some applications), even if it's not documented?

One problem is that if there isn't a BPF DLT_ value for the file's  
link-layer type, that wouldn't work.