Re: dumpcap and bpf assembler

[Sake Blok <sake () euronet nl>]

Hi Richard,

I think I misunderstood you then. I thought you were looking for a way to write some assembly/machine code for the BPF 
pseudo processor. Which of course works only on the content of a packet (link layer data and upwards). I believe that 
anything the BPF engine can do can be accomplished by using a capture filter expression, but it can turn ugly :-)

Cheers,
Sake
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe