Wireshark-dev: Re: [Wireshark-dev] Its possible to build and run wireshark from IDE
From: Dario Lombardo <[email protected]>
Date: Thu, 8 Nov 2018 09:52:46 +0100


On Wed, Nov 7, 2018 at 5:39 PM Tomer Bar <[email protected]> wrote:
i want to expose the validation of the display filter and use it like service?
any idea?

Do you want to do it programmatically (I mean you have a C code and you want to link with wireshark in some way) or can you do it running binary tshark?
If the latter, you can run "tshark -Y FILTER" and check the return code. 2 means error in the filter. You need something more that that, but it may be a starting point.