Ask Your Question

Revision history [back]

display filter caps only

Searching for executable files that begin with ascii "MZ".

http contains MZ

I create the filter then Follow TCP Stream. I'm getting small cap hits (eg "mz"). I just want large cap hits (eg "MZ"). Using regex doesn't seem to work. Any way to specify case?

TIA