122
edits
Capture module: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 176: | Line 176: | ||
|} | |} | ||
:will match packets to or from port 80 or 443. | :will match packets to or from port 80 or 443. | ||
* The expression | |||
"{| class="wikitable sortable" | |||
|- | |||
| regexp == "allegr[o,a]|HTTP" | |||
|- | |||
|} | |||
:will match packets that contain the string 'allegro' and/or 'allegra' and/or 'HTTP' anywhere in their payload. | |||
The capture can be limited to any amount of time or bytes for example to capture only one minute or one megabyte of traffic. | The capture can be limited to any amount of time or bytes for example to capture only one minute or one megabyte of traffic. | ||