This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I don't know why the matches operator doesn't find some hex digits. If I do something like: http matches "\xff"

I get no packets. This doesn't happen with hex digit which start by a number.

The funny is that If I use contains: http contains "\xff"

I get the packet I'm looking for.

The problem is that I need to use matches operator to set some regex in perl like: "http matches "\xff..(\xef|\xff)+"

I'm using Wireshark 1.6.4 Any ideas? Thank you so much

asked 23 Nov '11, 07:53

BorjaMerino's gravatar image

BorjaMerino
21337
accept rate: 0%

edited 23 Nov '11, 12:12

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


This is actually a bug (just filed), and unfortunately, I'm not aware of a workaround.

permanent link

answered 23 Nov '11, 17:56

helloworld's gravatar image

helloworld
3.1k42041
accept rate: 28%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×6
×2
×1

question asked: 23 Nov '11, 07:53

question was seen: 1,565 times

last updated: 23 Nov '11, 17:56

p​o​w​e​r​e​d by O​S​Q​A