'\" t
.\"     Title: dftest
.\"    Author: [see the "AUTHOR(S)" section]
.\" Generator: Asciidoctor 2.0.20
.\"      Date: 2023-11-17
.\"    Manual: \ \&
.\"    Source: \ \&
.\"  Language: English
.\"
.TH "DFTEST" "1" "2023-11-17" "\ \&" "\ \&"
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.ss \n[.ss] 0
.nh
.ad l
.de URL
\fI\\$2\fP <\\$1>\\$3
..
.als MTO URL
.if \n[.g] \{\
.  mso www.tmac
.  am URL
.    ad l
.  .
.  am MTO
.    ad l
.  .
.  LINKSTYLE blue R < >
.\}
.SH "NAME"
dftest \- Shows display filter byte\-code, for debugging dfilter routines.
.SH "SYNOPSIS"
.sp
\fBdftest\fP
[\~<filter>\~]
.SH "DESCRIPTION"
.sp
\fBdftest\fP is a simple tool which compiles a display filter and shows its bytecode.
Please refer to doc/README.display_filter for a description of the
DFVM (Display Filter Virtual Machine) Byte Codes.
.SH "OPTIONS"
.sp
filter
.RS 4
.sp
The display filter expression. If needed it has to be quoted.
.RE
.SH "DIAGNOSTIC OPTIONS"
.sp
\-\-log\-level <level>
.RS 4
Set the active log level.
Supported levels in lowest to highest order are "noisy", "debug", "info", "message", "warning", "critical", and "error".
Messages at each level and higher will be printed, for example "warning" prints "warning", "critical", and "error" messages and "noisy" prints all messages.
Levels are case insensitive.
.RE
.sp
\-\-log\-fatal <level>
.RS 4
Abort the program if any messages are logged at the specified level or higher.
For example, "warning" aborts on any "warning", "critical", or "error" messages.
.RE
.sp
\-\-log\-domains <list>
.RS 4
Only print messages for the specified log domains, e.g. "GUI,Epan,sshdump".
List of domains must be comma\-separated.
.RE
.sp
\-\-log\-debug <list>
.RS 4
Force the specified domains to log at the "debug" level.
List of domains must be comma\-separated.
.RE
.sp
\-\-log\-noisy <list>
.RS 4
Force the specified domains to log at the "noisy" level.
List of domains must be comma\-separated.
.RE
.sp
\-\-log\-file <path>
.RS 4
Write log messages and stderr output to the specified file.
.RE
.SH "EXAMPLES"
.sp
Show how the IP protocol is filtered:
.sp
.if n .RS 4
.nf
.fam C
dftest ip
.fam
.fi
.if n .RE
.sp
Shows how frame 150 is filtered:
.sp
.if n .RS 4
.nf
.fam C
dftest "frame.number == 150"
.fam
.fi
.if n .RE
.SH "SEE ALSO"
.sp
wireshark\-filter(4)
.SH "AUTHORS"
.sp
.B Original Author
.br
Jan Šafránek
.sp
.B Contributors
.br
Jaap Keuter