Re: Display filter implementation

[Guy Harris <guy () alum mit edu>]

On Jul 2, 2012, at 8:12 AM, Lloyd wrote:

> I would like to know more about Wireshark display filters. Is its
> internals are documented? Especially the display filter execution
> virtual machine's instruction set.
>
> I saw the instructions (Byte code) in the source tree, I would like to
> know more about it, any documentation available?

None other than the source code and whatever comments are in it.

Note that we make no guarantee that any detail of the implementation is fixed and unchanging, so the way it works 
internally now might not be the way it works internally in the future.  (We should preserve the way it works for users, 
modulo fixing bugs and making extensions and perhaps dealing better with character encodings.)  I'm not *anticipating* 
major changes; I'm just saying you shouldn't depend on, for example, the byte code never changing in an incompatible 
fashion.)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe