First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Does Wireshark support BGP regular expressions in filters?

Will the regular expressions as listed at https://blog.ine.com/2008/01/06/under..., for bgp, work for wireshark also?

Rajan's avatar
1
Rajan
asked 2018-11-30 01:39:47 +0000
cmaynard's avatar
11.1k
cmaynard
updated 2018-11-30 15:33:11 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

No. Wireshark supports bpf syntax for capture filters and it's own syntax for display filters.

grahamb's avatar
23.8k
grahamb
answered 2018-11-30 10:14:41 +0000
edit flag offensive 0 remove flag delete link

Comments

Wireshark does support Perl-compatible regular expressions using the matches or ~ operator for certain fields. To quote the wireshark-filter man page:

The "matches" or "~" operator allows a filter to apply to a specified Perl-compatible regular expression (PCRE). The "matches" operator is only implemented for protocols and for protocol fields with a text string representation. Matches are case-insensitive by default. For example, to search for a given WAP WSP User-Agent, you can write:

    wsp.user_agent matches "cldc"

This would match "cldc", "CLDC", "cLdC" or any other combination of upper and lower case letters.

You can force case sensitivity using

    wsp.user_agent matches "(?-i)cldc"

This is an example of PCRE's (?option) construct. (?-i) performs a case-sensitive pattern match but other options can be specified as well. More information can be found in the pcrepattern(3) man page at http://perldoc.perl.org/perlre.html).
cmaynard's avatar cmaynard (2018-11-30 15:29:22 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer