pcap_offline_filter(3pcap) on macOS
The text ccb121d3eec3, as Mac OS X 10.6.8, Mac OS X 10.6.7, Mac OS X 10.6.6, Mac OS X 10.6.5, Mac OS X 10.6.4, Mac OS X 10.6.3, Mac OS X 10.6.2, Mac OS X 10.6.1, Mac OS X 10.6 shipped it.
check whether a filter matches a packet