dftest.exe not present in WireShark 4.2

asked 2023-11-27 14:06:49 +0000

Jan-dD
1 ●2

There is no dftest.exe in the 4.2 release. (dftest is used to test display filter syntax. I use this in a script). The dftest.exe from previous version does not work :-( (dll missing?) Question: Is that a mistake and does it come back, is it deprecated, something else?

answered 2023-11-27 14:33:04 +0000

Chuckc
2858 ●6 ●570 ●20

9514: Remove dftest from installers, remove man page

I think an enhancement to tshark to improve the "validate a filter" use case could be useful.

I don't see where an issue/enhancement request was added for this.
You could add a comment to the merge request where it was removed or open an enhancement request.

edit flag offensive delete link

Comments

Thanks! So that is why it's gone. I followed the enhancement request link and added "Add display filter sanity check to Tshark" request.

Jan-dD ( 2023-11-27 15:31:38 +0000 )edit

19505: Add display filter sanity check to Tshark

Chuckc ( 2023-11-27 15:58:32 +0000 )edit

I was not aware of dftest. Checking a filter can also be done with tshark against an empty pcap file (with 0 packets). The exit code is 0 when valid. The same for checking capture filters using tcpdump.

André ( 2023-11-27 17:29:12 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

dftest.exe not present in WireShark 4.2

1 Answer

Comments

Your Answer

Question Tools

Stats

dftest.exe not present in WireShark 4.2 edit

1 Answer

Comments

Your Answer

Question Tools

Stats

dftest.exe not present in WireShark 4.2