This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Matches operator doesn’t work with some hex digits

1

I don't know why the matches operator doesn't find some hex digits. If I do something like: http matches "\xff"

I get no packets. This doesn't happen with hex digit which start by a number.

The funny is that If I use contains: http contains "\xff"

I get the packet I'm looking for.

The problem is that I need to use matches operator to set some regex in perl like: "http matches "\xff..(\xef|\xff)+"

I'm using Wireshark 1.6.4 Any ideas? Thank you so much

asked 23 Nov '11, 07:53

BorjaMerino's gravatar image

BorjaMerino
21337
accept rate: 0%

edited 23 Nov '11, 12:12

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


One Answer:

1

This is actually a bug (just filed), and unfortunately, I'm not aware of a workaround.

answered 23 Nov '11, 17:56

helloworld's gravatar image

helloworld
3.1k42041
accept rate: 28%