path: root/dfilters
diff options
authorJeffrey Smith <whydoubt@gmail.com>2015-08-18 22:03:41 -0500
committerAnders Broman <a.broman58@gmail.com>2015-09-11 06:31:33 +0000
commit80322d88da92969c170c915e93a33a96e12497a7 (patch)
tree516e0c526cda1291b5c2a376d40f4fb80b6ddc98 /dfilters
parent86d8b8d7bfd3c76d646907d5549e552519ea8261 (diff)
dfilter: Add membership operator
Added a new relational test: 'x in {a b c}'. The only LHS entity supported at this time is a field. The generated DFVM operations are equivalent to an OR'ed series of =='s, but with the redundant existence tests removed. Change-Id: Iddc89b81cf7ad6319aef1a2a94f93314cb721a8a Reviewed-on: https://code.wireshark.org/review/10246 Reviewed-by: Hadriel Kaplan <hadrielk@yahoo.com> Petri-Dish: Hadriel Kaplan <hadrielk@yahoo.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'dfilters')
1 files changed, 1 insertions, 1 deletions
diff --git a/dfilters b/dfilters
index 2c2a0dea24..45295ca5a6 100644
--- a/dfilters
+++ b/dfilters
@@ -14,4 +14,4 @@
"TCP or UDP port is 80 (HTTP)" tcp.port == 80 || udp.port == 80
"HTTP" http
"No ARP and no DNS" not arp and !(udp.port == 53)
-"Non-HTTP and non-SMTP to/from" not (tcp.port == 80) and not (tcp.port == 25) and ip.addr ==
+"Non-HTTP and non-SMTP to/from" ip.addr == and not tcp.port in {80 25}