Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

The matches operator is case insensitive and that has been the case since 2.6 (https://gitlab.com/wireshark/wireshark/-/commit/7d67af661a466dde4416c0583bbfa0250b14560f) You can use (?-i) for a case sensitive match.

That is the behavior as described in the manual https://www.wireshark.org/docs/man-pages/wireshark-filter.html and the yser guide https://www.wireshark.org/docs/wsug_html_chunked/ChWorkBuildDisplayFilterSection.html

It could possibly be pointed out a little bit more in the user guide, though the man page is fairly explicit. If you don't mind me asking, where did you "try looking it up?" I don't know that this is the sort of question ChatGPT would be good with.