Packet Sniffer SDK VCL Edition

HNFileAdapter :: Properties :: UserFilter

 Previous Next

Sets/Returns the handle of HNUserFilter object.

Syntax:

property UserFilter: Pointer;

Description:

Use UserFilter to set BPF value for current CAP file.

BPF filters may be used for filtering packets read from a CAP file by HNFileAdapter.Get_NextPacket function, also they will be used by HNFileAdpater object in AutoMode. At the same time the BPF statistics will be counted (see HNFileAdapter.Get_RecvCount, HNFileAdapter.Get_AcceptCount, HNFileAdapter.Get_RejectCount, HNFileAdapter.Get_ProcessCount).

Please remember, that UserFilter must be used with the HNFileAdapter.UserFilterActive property.
// Create IP filter
HNUserFilter1 = HNUserFilter.Create();
...
HNUserFilter1.AddCmd(BPF_LD+BPF_H+BPF_ABS, 12);
HNUserFilter1.AddJmp(BPF_JMP+BPF_JEQ+BPF_K, ETHERTYPE_IP, 0, 1);
HNUserFilter1.AddCmd(BPF_RET+BPF_K, -1);
HNUserFilter1.AddCmd(BPF_RET+BPF_K, 0);

HNFileAdapter1.UserFilter := HNUserFilter1.Handle;
HNFileAdapter1.UserFilterActive := TRUE;
HNFileAdapter1.OpenFile("packets.cap");
...
See also:HNFileAdapter, HNUserFilter, HNFileAdapter.UserFilterActive, HNFileAdapter.Get_RecvCount, HNFileAdapter.Get_AcceptCount, HNFileAdapter.Get_RejectCount, HNFileAdapter.Get_ProcessCount