~tpham3783/wireshark/recipe

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
<?xml version="1.0" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>dftest - The Wireshark Network Analyzer 1.12.6</title>
<link rel="stylesheet" href="../docbook/ws.css" type="text/css" />
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<link rev="made" href="mailto:root@localhost" />
</head>

<body>



<h1 id="NAME">NAME</h1>

<p>dftest - Shows display filter byte-code, for debugging dfilter routines.</p>

<h1 id="SYNOPSIS">SYNOPSIS</h1>

<p><b>dftest</b> <span style="white-space: nowrap;">[ &lt;filter&gt; ]</span></p>

<h1 id="DESCRIPTION">DESCRIPTION</h1>

<p><b>dftest</b> is a simple tool which compiles a display filter and shows its bytecode.</p>

<h1 id="OPTIONS">OPTIONS</h1>

<dl>

<dt id="filter">filter</dt>
<dd>

<p>The display filter expression. If needed it has to be quoted.</p>

</dd>
</dl>

<h1 id="EXAMPLES">EXAMPLES</h1>

<p>Show how the IP protocol is filtered:</p>

<pre><code>    dftest ip</code></pre>

<p>Shows how frame 150 is filtered:</p>

<pre><code>    dftest &quot;frame.number == 150&quot;</code></pre>

<h1 id="SEE-ALSO">SEE ALSO</h1>

<p>wireshark-filter(4)</p>


</body>

</html>