Reference

pcap_offline_filter(3pcap) on macOS

The text 92946a68eb07, as OS X 10.9.5, OS X 10.9.4, OS X 10.9.3, OS X 10.9.2, OS X 10.9.1, OS X 10.9, Mac OS X 10.8.5, Mac OS X 10.8.4, Mac OS X 10.8.3, Mac OS X 10.8.2, Mac OS X 10.8.1, Mac OS X 10.8, Mac OS X 10.7.5, Mac OS X 10.7.4, Mac OS X 10.7.3, Mac OS X 10.7.2, Mac OS X 10.7.1, Mac OS X 10.7 shipped it.

check whether a filter matches a packet

pcap_offline_filter(3pcap) on macOS now