Ethereal-dev: [Ethereal-dev] Modify field types

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Biot Olivier <Olivier.Biot@xxxxxxxxxxx>
Date: Fri, 5 Dec 2003 18:54:27 +0100 
Hi List,

If I want to optimize the "matches" operation, then I want to compile (and
study) the RE only once, before applying the filter. In order to do so, I
envisage to generate a new internal FT_PCRE field type, which would contain
a pointer to a pcre_tuple structure, itself containing a pointer to the
textual RE string, a pcre pointer, a pcre_extra pointer and a constant error
string pointer. At filter parsing, I'd like to transform the 2nd operand of
"matches" from any FT_STRING type to this FT_PCRE.

Is this possible, and how do I do this?

Regards,

Olivier