 | 1 | initial version |
There are examples of this in the Wireshark User's Guide:
http.host matches "acme\\.(org|com|net)" The display filter above matches HTTP packets where the HOST header contains acme.org, acme.com, or acme.net. Comparisons are case-insensitive.
WSUG: 6.4.2. Comparing Values
"Another common pitfall is using . instead of \. in a regular expression. The former will match any character (the backslash is superfluous) while the latter will match a literal dot."
Try: ip.host matches "^10\\."
| | 2 | No.2 Revision |
There are examples of this in the Wireshark User's Guide:
http.host matches "acme\\.(org|com|net)" The display filter above matches HTTP packets where the HOST header contains acme.org, acme.com, or acme.net. Comparisons are case-insensitive.
WSUG: 6.4.2. Comparing Values
"Another common pitfall is using . instead of \. in a regular expression. The former will match any character (the backslash is superfluous) while the latter will match a literal dot."
Try: ip.host matches "^10\\."
(xkcd 1638: Backslashes)
