This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Can dfilter_apply() over an edt tree be undone?

0

I am writing a dissector, and I am applying a read filter using dfilter_apply() on edt tree on the packets during a live capture.
Is there any way to undo the effect of dfilter_apply(); on edt tree, since during live capture the tree gets modified after applying a read filter?

asked 06 Feb '12, 08:40

Sanny_D's gravatar image

Sanny_D
0●18●20●21
accept rate: 50%

edited 06 Feb '12, 13:22

multipleinterfaces's gravatar image

multipleinte...
1.3k●15●23●40