325
edits
Capture module: Difference between revisions
m
→Using expert filters to start captures
Remco.derooy (talk | contribs) |
Remco.derooy (talk | contribs) |
||
| Line 180: | Line 180: | ||
:{| class="wikitable sortable" | :{| class="wikitable sortable" | ||
|- | |- | ||
| <nowiki>regexp == "allegr[o,a]|HTTP"</nowiki> | | <nowiki>regexp == "allegr[o,a]'''|'''HTTP"</nowiki> | ||
|- | |- | ||
|} | |} | ||
| Line 189: | Line 189: | ||
:{| class="wikitable sortable" | :{| class="wikitable sortable" | ||
|- | |- | ||
| <nowiki>regexp == "(?i)allegro|http"</nowiki> | | <nowiki>regexp == "(?i)allegro'''|'''http"</nowiki> | ||
|- | |- | ||
|} | |} | ||
| Line 200: | Line 200: | ||
:{| class="wikitable sortable" | :{| class="wikitable sortable" | ||
|- | |- | ||
| <nowiki>regexp == “allegro|analyzer” and l7protocol == "dns"</nowiki> | | <nowiki>regexp == “allegro'''|'''analyzer” and l7protocol == "dns"</nowiki> | ||
|- | |- | ||
|} | |} | ||
| Line 208: | Line 208: | ||
:{| class="wikitable sortable" | :{| class="wikitable sortable" | ||
|- | |- | ||
| <nowiki>regexp == “allegro|analyzer” and l7protocol != "dns"</nowiki> | | <nowiki>regexp == “allegro'''|'''analyzer” and l7protocol != "dns"</nowiki> | ||
|- | |- | ||
|} | |} | ||
| Line 215: | Line 215: | ||
<i>Whenever you are unsure about the outcome of RegEx based packet capturing, you can pre-test the outcome of your expressions on https://pythex.org/. | <i>Whenever you are unsure about the outcome of RegEx based packet capturing, you can pre-test the outcome of your expressions on https://pythex.org/. | ||
While pre-testing on https://pythex.org/, avoid using the “IGNORECASE” button. Instead use the (?i) modifier for constructing case insensitive expressions, as mentioned above. | While pre-testing on https://pythex.org/, avoid using the “IGNORECASE” button. Instead use the (?i) modifier for constructing case insensitive expressions, as mentioned above. | ||
Python based expression examples and explanations you'll find on https://www.programiz.com/python-programming/regex</i> | PCRE/Python based expression examples and explanations you'll find on https://www.programiz.com/python-programming/regex</i> | ||