Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

I made a small python gist to find a regex in a display filter.

In your case, you would use: python reshark.py <your.pcap> frame.time "Jan 27, 2019 \d{2}:\5[4-6]"

Obligatory reference to Regular vs Context-Free Grammars

I made a small python gist to find a regex in a display filter.

In your case, you would use: use:

python reshark.py <your.pcap> frame.time "Jan 27, 2019 \d{2}:\5[4-6]"

Obligatory reference to Regular vs Context-Free Grammars

I made a small python gist to find a regex in a display filter.

filter. In your case, you would use:

python reshark.py <your.pcap> frame.time "Jan 27, 2019 \d{2}:\5[4-6]"

Obligatory reference to Regular vs Context-Free Grammars

I made a small python gist to find a regex in a display filter. In your case, you would use:

python reshark.py <your.pcap> frame.time "Jan 27, 2019 \d{2}:\5[4-6]"\d{2}:\5[4-6]"

Obligatory reference to Regular vs Context-Free Grammars

I made a small python gist to find create a regex in pcap where the output of a display filter. filter matches a given regex. In your case, you would use:

python reshark.py <your.pcap> frame.time "Jan 27, 2019 \d{2}:\5[4-6]"

Obligatory reference to Regular vs Context-Free Grammars

I made a small python gist to create a pcap from packets where the output of a display filter matches a given regex. In your case, you would use:

python reshark.py <your.pcap> frame.time "Jan 27, 2019 \d{2}:\5[4-6]"

Obligatory reference to Regular vs Context-Free Grammars

I made a small python gist to create a pcap from packets where the output of a display filter matches a given regex. In your case, you would use:

python reshark.py <your.pcap> frame.time "Jan 27, 2019 \d{2}:\5[4-6]" \d{2}:\5[4-5]"

Obligatory reference to Regular vs Context-Free Grammars