Wireshark-dev: Re: [Wireshark-dev] Add BPF filtering to Wiretap?

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 5 Feb 2007 15:14:35 -0800

On Feb 5, 2007, at 12:11 PM, Gerald Combs wrote:


Would it make sense to add BPF filtering to Wiretap via
pcap_offline_filter()?
Would it make sense to add BPF filtering to Wiretap via bpf_filter(), which is available in all version of libpcap (and depended on by at least some applications), even if it's not documented?
One problem is that if there isn't a BPF DLT_ value for the file's link-layer type, that wouldn't work.