There is no dftest.exe in the 4.2 release. (dftest is used to test display filter syntax. I use this in a script). The dftest.exe from previous version does not work :-( (dll missing?) Question: Is that a mistake and does it come back, is it deprecated, something else?
9514: Remove dftest from installers, remove man page
I think an enhancement to tshark to improve the "validate a filter" use case could be useful.
I don't see where an issue/enhancement request was added for this.
You could add a comment to the merge request where it was removed or open an enhancement request.
Thanks! So that is why it's gone. I followed the enhancement request link and added "Add display filter sanity check to Tshark" request.
I was not aware of dftest. Checking a filter can also be done with tshark against an empty pcap file (with 0 packets). The exit code is 0 when valid. The same for checking capture filters using tcpdump.
Asked: Nov 27 '3
Seen: 140 times
Last updated: Nov 27 '23
