Offline filters

[polachok]

This commit adds support for compiling filters into BPF programs and offline filtering.

[polachok]

@ebfull ping?

[ebfull]

@polachok Sorry that I haven't had time to review this! Reviewing now.

[ebfull]

Hm, I don't want to expose anything in raw in the public API if possible, so I'd rather have a wrapper type. And I need to double-check that the Clone impl is memory-safe.

[polachok]

Thanks for reviewing!

I don't quite follow, I think I only expose wrapper types (raw fields are not pub):

https://github.com/ebfull/pcap/pull/56/files#diff-b4aea3e418ccdb71239b96952d9cddb6R796

[ebfull]

Ah, sorry. I misread.

[aldanor]

Hi @polachok, wondering if this PR is still relevant? If so, it needs some tests (and a rebase on the latest master).

[polachok]

Yes, it's still relevant, we use it in https://github.com/LTD-Beget/syncookied. What kind of tests do you need?

[bvandersloot]

Just commenting as another party that thinks this is a very useful feature. I'm running my project off of @polachok's branch until this is merged.

[ebfull]

My next priority is to review and merge this.