325
edits
Capture module: Difference between revisions
m
→Using expert filters to start captures
Remco.derooy (talk | contribs) |
Remco.derooy (talk | contribs) |
||
| Line 183: | Line 183: | ||
|- | |- | ||
|} | |} | ||
:will match packets that contain the string 'allegro' and/or 'allegra' and/or 'HTTP' anywhere in their payload. Please note that the use of regexp is case sensitive. You must use the (?i) modifier for case insensitive filtering. | :will match packets that contain the string(s) 'allegro' and/or 'allegra' and/or 'HTTP' anywhere in their payload. Please note that the use of regexp is case sensitive. You must use the (?i) modifier for case insensitive filtering. | ||
: | |||
* The expression | |||
:{| class="wikitable sortable" | |||
|- | |||
| <nowiki>regexp == "(?i)allegro|http"</nowiki> | |||
|- | |||
|} | |||
::will case insensitive match packets that contain the string(s) 'allegro' and/or 'http' anywhere in their payload. | |||
Captures can be limited to any amount of time or bytes, for example to capture only one minute or one megabyte of traffic. | Captures can be limited to any amount of time or bytes, for example to capture only one minute or one megabyte of traffic. | ||