Where are display filters implemented in the Wireshark code?

asked 2022-06-22 06:38:17 +0000

oconoor
1 ●1

updated 2022-06-22 22:03:35 +0000

Guy Harris
19890 ●3 ●660 ●207

Hello,

I am trying to find where are the display filter stored in the code so I can understand how they work

For example if i type in the filter bar : ip.flags.df How can I find what are the lines behind that performs this filter in the code ?

Thanks

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2022-06-22 07:03:53 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●976 ●227 https://www.wireshark.org

Display filtering is a complex issue, most of the code for it can be found here but there are other parts, e.g. in dissectors where fields are registered.

edit flag offensive delete link

Comments

Thank you, it's a start !

oconoor ( 2022-06-22 07:07:21 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2022-06-22 06:38:17 +0000

Seen: 124 times

Last updated: Jun 22 '22

Where are display filters implemented in the Wireshark code? edit