Wireshark · Wireshark-dev: Re: [Wireshark-dev] Add BPF filtering to Wiretap?

[Guy Harris <guy@xxxxxxxxxxxx>]

On Feb 5, 2007, at 12:11 PM, Gerald Combs wrote:

> Would it make sense to add BPF filtering to Wiretap via
> pcap_offline_filter()?

Would it make sense to add BPF filtering to Wiretap via bpf_filter(),  
which is available in all version of libpcap (and depended on by at  
least some applications), even if it's not documented?

One problem is that if there isn't a BPF DLT_ value for the file's  
link-layer type, that wouldn't work.