Wireshark mailing list archives

How does wireshark filter packets


From: Wenfei Wu <wenfeiwu () cs wisc edu>
Date: Tue, 29 Jan 2013 15:39:27 -0600

Hi, all,
  I want to know how wireshark use the filter expression to filter packets.
Does it parse the packet first, and then use the filter expression to
check? If so, is there some intermediate data structure to store the filter
expression? What is the algorithm?
  Is there some materials about this?
  Regards,
  Wenfei Wu
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: