Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Add BPF filtering to Wiretap?

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Mon, 05 Feb 2007 12:11:19 -0800
Would it make sense to add BPF filtering to Wiretap via
pcap_offline_filter()?  This would let you pre-filter capture files in
Wireshark and TShark (and possibly editcap) without having to build a
protocol tree.  The main disadvantage is that it's only available in
WinPcap.