Wireshark-dev: [Wireshark-dev] Add BPF filtering to Wiretap?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Mon, 05 Feb 2007 12:11:19 -0800
Would it make sense to add BPF filtering to Wiretap via
pcap_offline_filter()?  This would let you pre-filter capture files in
Wireshark and TShark (and possibly editcap) without having to build a
protocol tree.  The main disadvantage is that it's only available in
WinPcap.