Ethereal-users: [Ethereal-users] Problems with Perl regular expression (PCRE) and tethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Nicholas George <nick.george@xxxxxxxxx>
Date: Tue, 29 Nov 2005 13:15:17 -0500
I am having a problem searching a pcap dump file using the perl
regular expression syntax for tethereal. I've found the documentation
to be sparse. :(

I would like to do something like:
tethereal -r in.dmp frame matches 'GET /file\.htm HTTP/1\.1'

However, it won't work unless I do:
tethereal -r in.dmp frame matches '"GET /file\\.htm HTTP/1\\.1"'
I don't understand why, aren't these two lines the same? (I'm using
the bash shell and tethereal V0.10.13)
The error message I get is:
tethereal: "/" was unexpected in this context

It also doesn't work if I try:
tethereal -r in.dmp frame matches "\"GET /file\\.htm HTTP/1\\.1\""
although this time I get no error message.

It DOES work if I try.
tethereal -r in.dmp -R 'frame matches "GET /file\\.htm HTTP/1\\.1"'

My questions are:
What is the point of the -R?
Is there any way of using a perl regex with tethereal without having
to use double escapes \\ ?

Kind Regards,
Nick George