I’ve been trying to get a filter to match a sequence that can appear at any offset but follows a pattern of two set values, a random value, and a final set value.
Tried the usual suspects like:
data.data contains a4:c3:$$:b2
Tried replacing contains with matches.
How would I go about doing this?
asked 15 Feb '15, 20:55
edited 15 Feb '15, 20:59
contains is a plain string search. What you are looking for is matches (regular expressions):
I have not tested the following, but I think it should work.
However, if the data is binary, you'll have to escape the HEX representation
I did NOT escape ":" as I don't know if that's an ASCII char in your example, so I used '.' instead.
answered 16 Feb '15, 06:26
Kurt Knochner ♦
edited 16 Feb '15, 06:28