Ethereal-dev: Re: [Ethereal-dev] Display filter search with regular expressions

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxxxxxxx>
Date: Tue, 28 Oct 2003 14:11:02 -0000
On Tue, 2003-10-28 at 05:08, Biot Olivier wrote:
> Hi list,
> 
> I've been thinking about the case sensitiveness in Ethereal header fields,
> and I'm thinking in the direction of regular expressions (RE) instead of the
> current "contains" function. This means we need a RE library (e.g., the
> almost-everywhere-available "regex.h") which we have to use in the
> epan/ftypes/ftype-*. The Ethereal dfilter operator name could be "regex" or
> "~". Note that there are different flavors of regex, namely POSIX and GNU.
> 
> I am aware that RE parsing takes CPU, but it adds lots of extra
> functionality at the cost of evaluating a RE if/when used. This way, we
> could also do case-insensitive pattern matches.
> 
> Does anybody know how complex this would be?
> 

It's something that's been on my personal wish-list for a long time,
too. I personally like the Perl-style regexes (http://www.pcre.org/)

It would take some minor changes in the various dfilter and ftype
files.  I don't think it would be a lot of work.

--gilbert