path: root/tools/dfilter-test.py
AgeCommit message (Collapse)AuthorFilesLines
2008-11-27 - Change the expected output of TVB test ck_eq_1 to match actual behaviorStephen Fisher1-9/+1
- Remove a test that causes tshark to output an error for an invalid filter (putting the protocol on the right-hand side of the == operator) svn path=/trunk/; revision=26860
2006-06-06Ethereal -> WiresharkGerald Combs1-1/+1
svn path=/trunk/; revision=18374
2006-05-31Tethereal/tethereal -> TShark/tshark.Gerald Combs1-14/+14
svn path=/trunk/; revision=18268
2006-05-22ethereal->wireshark updatesRonnie Sahlberg1-2/+2
svn path=/trunk/; revision=18206
2006-05-02Add infrastructure for display filter functions.Gilbert Ramirez1-0/+40
Add upper() and lower() display filter functions for string fields. svn path=/trunk/; revision=18071
2004-07-18Set the svn:eol-style property on all text files to "native", so thatGuy Harris1-1/+1
they have LF at the end of the line on UN*X and CR/LF on Windows; hopefully this means that if a CR/LF version is checked in on Windows, the CRs will be stripped so that they show up only when checked out on Windows, not on UN*X. svn path=/trunk/; revision=11400
2004-02-22If the LHS is a STRING or UNPARSED string, and the RHS is a FIELD,Gilbert Ramirez1-2/+23
then make sure that the FIELD can participate in the relation that is expressed in the display filter. Note that tvbuff's *should* be able to participate in == comparisons, etc., but those functions need to be added to ftype-tvbuff.c first. svn path=/trunk/; revision=10175
2003-08-27Add a "contains" operator for byte-strings, strings, and tvbuffs (protocols).Gilbert Ramirez1-1/+74
The search uses a naive approach; more work is required to add a Boyer-Moore Search algorithm. svn path=/trunk/; revision=8280
2003-07-25Add to the fundamental types passed between the scanner and the parser.Gilbert Ramirez1-23/+90
Besides "STRING", there is now "UNPARSED_STRING", where the distinction is that "STRING" was a double-quoted string and "UNPARSED_STRING" is just a sequence of characters that the scanner didn't know how to scan/parse, so it's up to the Ftype to parse it. This gives us more flexibility and prepares the dfilter parsing engine for the upcoming addition of the "contains" operator. In the process of doing this, I also re-did the double-quoted string support in the scanner, so that instead of the naively-simple support we used to have, double-quoted strings now can have embedded dobule-quotes, embedded octal sequences, and embedded hexadecimal sequences: "\"" embedded double-quote "\110" embedded octal "\x48" embedded hex Enhance the dfilter unit test script to be able to run a single collection of tests instead of having to run all of them all the time. svn path=/trunk/; revision=8083
2003-07-09Script to unit-test ftype functions via dfilters passed to tethereal.Gilbert Ramirez1-0/+1224
Uses text2pcap to create pcap trace files from hex-dumps embedded in the test script. svn path=/trunk/; revision=7996