Wireshark-dev: Re: [Wireshark-dev] Display filter implementation
From: Lloyd <[email protected]>
Date: Thu, 5 Jul 2012 09:20:29 +0530
On Wed, Jul 4, 2012 at 6:50 PM, Gilbert Ramirez <[email protected]> wrote:
> There is a makefile target called dftest that is used to test the display
> filter engine. Its dependencies are the minimal set of dependencies you
> need.
>
> Gilbert
>
> On Jul 4, 2012 3:18 AM, "Lloyd" <[email protected]> wrote:
>>
>> On Wed, Jul 4, 2012 at 12:05 AM, Guy Harris <[email protected]> wrote:
>> >
>> > On Jul 2, 2012, at 8:12 AM, Lloyd wrote:
>> >
>> >> I would like to know more about Wireshark display filters. Is its
>> >> internals are documented? Especially the display filter execution
>> >> virtual machine's instruction set.
>> >>
>> >> I saw the instructions (Byte code) in the source tree, I would like to
>> >> know more about it, any documentation available?
>> >
>> > None other than the source code and whatever comments are in it.
>> >
>> > Note that we make no guarantee that any detail of the implementation is
>> > fixed and unchanging, so the way it works internally now might not be the
>> > way it works internally in the future.  (We should preserve the way it works
>> > for users, modulo fixing bugs and making extensions and perhaps dealing
>> > better with character encodings.)  I'm not *anticipating* major changes; I'm
>> > just saying you shouldn't depend on, for example, the byte code never
>> > changing in an incompatible fashion.)
>> >
>> > ___________________________________________________________________________
>> > Sent via:    Wireshark-dev mailing list <[email protected]>
>> > Archives:    http://www.wireshark.org/lists/wireshark-dev
>> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>> >
>> > mailto:[email protected]?subject=unsubscribe
>>
>> Thanks Guy Harris. Would like to know one more thing, is it possible
>> to build display filter module alone in the Windows environment? If
>> not in Windows at least in Linux? Does it has complex dependencies?
>>
>> Thanks,
>>   Lloyd
>>
>> ___________________________________________________________________________
>> Sent via:    Wireshark-dev mailing list <[email protected]>
>> Archives:    http://www.wireshark.org/lists/wireshark-dev
>> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>>
>> mailto:[email protected]?subject=unsubscribe
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <[email protected]>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:[email protected]?subject=unsubscribe


Thank you Gilbert...