Wireshark  2.9.0-477-g68ec514b
The Wireshark network protocol analyzer
Classes | Typedefs | Functions | Variables
dissector_filters.h File Reference
#include "ws_symbol_export.h"

Go to the source code of this file.

Classes

struct  conversation_filter_s
 

Typedefs

typedef gboolean(* is_filter_valid_func) (struct _packet_info *pinfo)
 
typedef gchar *(* build_filter_string_func) (struct _packet_info *pinfo)
 
typedef struct conversation_filter_s conversation_filter_t
 

Functions

WS_DLL_PUBLIC void register_conversation_filter (const char *proto_name, const char *display_name, is_filter_valid_func is_filter_valid, build_filter_string_func build_filter_string)
 
WS_DLL_PUBLIC struct conversation_filter_sfind_conversation_filter (const char *proto_name)
 
void conversation_filters_cleanup (void)
 
WS_DLL_PUBLIC gchar * conversation_filter_from_packet (struct _packet_info *pinfo)
 

Variables

WS_DLL_PUBLIC GList * conv_filter_list
 

Typedef Documentation

typedef gchar*(* build_filter_string_func) (struct _packet_info *pinfo)

callback function definition: return the available filter for this packet or NULL if no filter is available, Filter needs to be freed after use

typedef gboolean(* is_filter_valid_func) (struct _packet_info *pinfo)

callback function definition: is a filter available for this packet?

Function Documentation

WS_DLL_PUBLIC gchar* conversation_filter_from_packet ( struct _packet_info pinfo)

Tries to build a suitable display filter for the conversation in the current packet. More specific matches are tried first (like TCP ports) followed by less specific ones (IP addresses). NULL is returned when no filter is found.

The returned filter should be freed with g_free.

WS_DLL_PUBLIC void register_conversation_filter ( const char *  proto_name,
const char *  display_name,
is_filter_valid_func  is_filter_valid,
build_filter_string_func  build_filter_string 
)

register a dissector filter