First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Matches keyword being case-insensitive without me using the "(?i)" flag.

I am facing a (what I can only presume) bug in which the matches display filter keyword, which is supposed to work with RegEx, is being case insensitive without me using the (?i) flag. So for example, I get the same results by using the following filters: frame matches "google", and frame matches "GOOGLE", and any variation on the character cases. I tried looking it up and asking Chat GPT, but I found nothing about this topic. I don't expect this to be a feature, since RegEx is used to be super explicit about what you are looking for, so it shouldn't just throw any case-insensitive matches at you.

I hope you guys can help me and guide me on this issue, since I'm losing my mind over this!

fadl's avatar
1
fadl
asked 2024-05-26 18:04:19 +0000, updated 2024-05-26 18:05:10 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

The matches operator is case insensitive and that has been the case since 2.6 (https://gitlab.com/wireshark/wireshar...) You can use (?-i) for a case sensitive match.

That is the behavior as described in the manual https://www.wireshark.org/docs/man-pa... and the yser guide https://www.wireshark.org/docs/wsug_h...

It could possibly be pointed out a little bit more in the user guide, though the man page is fairly explicit. If you don't mind me asking, where did you "try looking it up?" I don't know that this is the sort of question ChatGPT would be good with.

johnthacker's avatar
156
johnthacker
answered 2024-05-26 22:11:40 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Honestly, I googled "wireshark matches display filter case sensitivity" and a bunch of variations of that. I didn't find anything to do with what I googled. I asked GPT and since the cut-off for GPT was 2020 it was weird that it tell me about the update since it was V2.6 was before 2020. Thanks for the answer!

fadl's avatar fadl (2024-05-27 15:50:10 +0000) edit
more
  • delete

Another example of a ChatGPT hallucination?

grahamb's avatar grahamb (2024-05-27 16:45:23 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer