Wireshark-dev: [Wireshark-dev] r37588 always set capture filter
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx>
Date: Fri, 17 Jun 2011 20:03:10 +0200
Hi,

After this commit if no filter is set we always end up with BPF code like:
	(000) ret      #65535

Which seems to be *NOT OPTIMIZED* nor by libpcap nor by kernel.

Can we have some #ifdef WINCAPs if it's really needed for winpcap?
Or at least:
  (interface_opts.cfilter || !is_remote_capturing) ? interface_opts.cfilter : "")

Regards,
  Jakub.