Ask Your Question
0

dftest.exe not present in WireShark 4.2

asked 2023-11-27 14:06:49 +0000

Jan-dD gravatar image

There is no dftest.exe in the 4.2 release. (dftest is used to test display filter syntax. I use this in a script). The dftest.exe from previous version does not work :-( (dll missing?) Question: Is that a mistake and does it come back, is it deprecated, something else?

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by » oldest newest most voted
0

answered 2023-11-27 14:33:04 +0000

Chuckc gravatar image

9514: Remove dftest from installers, remove man page

I think an enhancement to tshark to improve the "validate a filter" use case could be useful.

I don't see where an issue/enhancement request was added for this.
You could add a comment to the merge request where it was removed or open an enhancement request.

edit flag offensive delete link more

Comments

Thanks! So that is why it's gone. I followed the enhancement request link and added "Add display filter sanity check to Tshark" request.

Jan-dD gravatar imageJan-dD ( 2023-11-27 15:31:38 +0000 )edit

19505: Add display filter sanity check to Tshark

Chuckc gravatar imageChuckc ( 2023-11-27 15:58:32 +0000 )edit

I was not aware of dftest. Checking a filter can also be done with tshark against an empty pcap file (with 0 packets). The exit code is 0 when valid. The same for checking capture filters using tcpdump.

André gravatar imageAndré ( 2023-11-27 17:29:12 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2023-11-27 14:06:49 +0000

Seen: 123 times

Last updated: Nov 27 '23