There is a makefile target called dftest that is used to test the display
filter engine. Its dependencies are the minimal set of dependencies you
need.

Gilbert
On Jul 4, 2012 3:18 AM, "Lloyd" <[email protected]> wrote:

> On Wed, Jul 4, 2012 at 12:05 AM, Guy Harris <[email protected]> wrote:
> >
> > On Jul 2, 2012, at 8:12 AM, Lloyd wrote:
> >
> >> I would like to know more about Wireshark display filters. Is its
> >> internals are documented? Especially the display filter execution
> >> virtual machine's instruction set.
> >>
> >> I saw the instructions (Byte code) in the source tree, I would like to
> >> know more about it, any documentation available?
> >
> > None other than the source code and whatever comments are in it.
> >
> > Note that we make no guarantee that any detail of the implementation is
> fixed and unchanging, so the way it works internally now might not be the
> way it works internally in the future.  (We should preserve the way it
> works for users, modulo fixing bugs and making extensions and perhaps
> dealing better with character encodings.)  I'm not *anticipating* major
> changes; I'm just saying you shouldn't depend on, for example, the byte
> code never changing in an incompatible fashion.)
> >
> ___________________________________________________________________________
> > Sent via:    Wireshark-dev mailing list <[email protected]>
> > Archives:    http://www.wireshark.org/lists/wireshark-dev
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> >              mailto:[email protected]
> ?subject=unsubscribe
>
> Thanks Guy Harris. Would like to know one more thing, is it possible
> to build display filter module alone in the Windows environment? If
> not in Windows at least in Linux? Does it has complex dependencies?
>
> Thanks,
>   Lloyd
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <[email protected]>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:[email protected]
> ?subject=unsubscribe
>
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe

Reply via email to