First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Where are display filters implemented in the Wireshark code?

Hello,

I am trying to find where are the display filter stored in the code so I can understand how they work

For example if i type in the filter bar : ip.flags.df How can I find what are the lines behind that performs this filter in the code ?

Thanks

oconoor's avatar
1
oconoor
asked 2022-06-22 06:38:17 +0000
Guy Harris's avatar
19.9k
Guy Harris
updated 2022-06-22 22:03:35 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Display filtering is a complex issue, most of the code for it can be found here but there are other parts, e.g. in dissectors where fields are registered.

grahamb's avatar
23.8k
grahamb
answered 2022-06-22 07:03:53 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thank you, it's a start !

oconoor's avatar oconoor (2022-06-22 07:07:21 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer