Wireshark mailing list archives

Display filter alternative


From: Lloyd <lloydkl.tech () gmail com>
Date: Thu, 5 Jul 2012 15:08:38 +0530

Hi,

I am studying about packet filtering methods. Then I came across
NetBee library (combination of NetPDL+NetPFL+NetVM), by the developer
of Winpcap. I have not tried the libary yet, but the authors claim
that it is a very flexible, efficient and an extendable system (O.
Morandi, F. Risso, M. Baldi, A. Baldini, “Enabling Flexible Packet
Filtering Through Dynamic Code Generation”). I am interested in
comparing Wireshark's display filter against the Netbee system for
efficiency and extendability.

The have compared their system against BPF but not with wireshark's
display filter.

before I begin, I would like to know the opinion of Wireshark experts
regarding this.

Thanks,
  Lloyd
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: