https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6613
Summary: "matches" operator fails to match hex
Product: Wireshark
Version: SVN
Platform: All
OS/Version: All
Status: NEW
Severity: Normal
Priority: Low
Component: Wireshark
AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
ReportedBy: tony19@xxxxxxxxx
Created an attachment (id=7462)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7462)
Test pcap for testing "matches"
Build Information:
wireshark 1.7.1 (SVN Rev 39994 from /trunk)
Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GTK+ 2.24.6, with Cairo 1.10.2, with Pango 1.28.4, with
GLib 2.28.8, with libpcap 1.1.1, with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.4, with Lua 5.1, with Python 2.7.1, with GnuTLS
2.8.6, with Gcrypt 1.5.0, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Aug 30 2011 19:19:18), without AirPcap.
Running on Mac OS 10.7.2 (Darwin 11.2.0), with locale en_US.UTF-8, with libpcap
version 1.1.1, with libz 1.2.5, GnuTLS 2.8.6, Gcrypt 1.5.0.
Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.1.00).
--
The "matches" operator in display filters fails to detect letter-only hex
values (i.e., "\xAB, \xCD, \xFF", etc).
The problem is that the GRegex initialization is missing the G_REGEX_RAW flag,
needed to parse raw byte sequences instead of UTF8 strings. See
http://developer.gnome.org/glib/2.30/glib-Perl-compatible-regular-expressions.html#G-REGEX-RAW:CAPS.
Ref:
http://ask.wireshark.org/questions/7582/matches-operator-doesnt-work-with-some-hex-digits
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
