[Winpcap-users] Filter

[Guy Harris]

Benjamin Amaudric wrote:

> I want to know how can I test by a programm, if the filter will  be 
> accept by winpcap?
> WinPcap have a program which do this? No?

You might be able to use WinDump for this - "windump -i {interface} -d 
{filter}" will try to compile the filter for the interface in question 
(whether a given filter will work or not depends on the link-layer type 
on which it's being used), and succeed or fail.  At least on UN*X, the 
exit status for a "tcpdump -d" call will be 0 if it succeeds or 1 if it 
fails; I don't know whether you can do something similar on Windows.