pcap_offline_filter(3) on FreeBSD
The text 5f34d885efb5, as FreeBSD 10.4-RELEASE, FreeBSD 10.3-RELEASE, FreeBSD 10.2-RELEASE, FreeBSD 10.1-RELEASE, FreeBSD 10.0-RELEASE, FreeBSD 9.3-RELEASE, FreeBSD 9.2-RELEASE shipped it.
check whether a filter matches a packet