325
edits
Capture module: Difference between revisions
Jump to navigation
Jump to search
m
→Using expert filters to start captures
Remco.derooy (talk | contribs) |
Remco.derooy (talk | contribs) |
||
| Line 140: | Line 140: | ||
* '''callId''': The string value of a SIP call ID or similar identifier (e.g. P-Palladion-ID) | * '''callId''': The string value of a SIP call ID or similar identifier (e.g. P-Palladion-ID) | ||
* '''ipFragment''': If set to 1 all IPv4 fragments will be captured (i.e. packets having the 'More fragments' flag and 'Fragment offset' set). If set to 0 all packets without IPv4 fragmentation will be captured. | * '''ipFragment''': If set to 1 all IPv4 fragments will be captured (i.e. packets having the 'More fragments' flag and 'Fragment offset' set). If set to 0 all packets without IPv4 fragmentation will be captured. | ||
* '''regexp''': The packet payload matches the quoted regular expression to the other side of the == operator or does not match the regular expression to the other side of the != operator. In case of IP packets the matching will be performed on the L7 payload of the packet. In case of non-IP packets the matching will be performed on the whole packet except the Ethernet header. Regular expressions largely support the pattern syntax used by the PCRE library with the exception of certain constructs. An invalid pattern will produce a descriptive error message and prevent the capture from being started. | * '''regexp''': The packet payload matches the quoted regular expression (RegEx) to the other side of the == operator or does not match the regular expression to the other side of the != operator. In case of IP packets the matching will be performed on the L7 payload of the packet. In case of non-IP packets the matching will be performed on the whole packet except the Ethernet header. Regular expressions largely support the pattern syntax used by the PCRE library with the exception of certain constructs. An invalid pattern will produce a descriptive error message and prevent the capture from being started. | ||
For a specific precedence you may use parentheses '''('''/''')'''. | For a specific precedence you may use parentheses '''('''/''')'''. | ||