diff options
| author | Jeffrey Smith <whydoubt@gmail.com> | 2015-08-18 22:03:41 -0500 |
|---|---|---|
| committer | Anders Broman <a.broman58@gmail.com> | 2015-09-11 06:31:33 +0000 |
| commit | 80322d88da92969c170c915e93a33a96e12497a7 (patch) | |
| tree | 516e0c526cda1291b5c2a376d40f4fb80b6ddc98 /dfilters | |
| parent | 86d8b8d7bfd3c76d646907d5549e552519ea8261 (diff) | |
| download | wireshark-80322d88da92969c170c915e93a33a96e12497a7.tar.gz | |
dfilter: Add membership operator
Added a new relational test: 'x in {a b c}'. The only LHS entity
supported at this time is a field. The generated DFVM operations are
equivalent to an OR'ed series of =='s, but with the redundant existence
tests removed.
Change-Id: Iddc89b81cf7ad6319aef1a2a94f93314cb721a8a
Reviewed-on: https://code.wireshark.org/review/10246
Reviewed-by: Hadriel Kaplan <hadrielk@yahoo.com>
Petri-Dish: Hadriel Kaplan <hadrielk@yahoo.com>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'dfilters')
| -rw-r--r-- | dfilters | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -14,4 +14,4 @@ "TCP or UDP port is 80 (HTTP)" tcp.port == 80 || udp.port == 80 "HTTP" http "No ARP and no DNS" not arp and !(udp.port == 53) -"Non-HTTP and non-SMTP to/from 192.0.2.1" not (tcp.port == 80) and not (tcp.port == 25) and ip.addr == 192.0.2.1 +"Non-HTTP and non-SMTP to/from 192.0.2.1" ip.addr == 192.0.2.1 and not tcp.port in {80 25} |