Wireshark-bugs: [Wireshark-bugs] [Bug 12522] Double escaping of backslash in Regex required

Date: Tue, 21 Jun 2016 06:28:42 +0000

Comment # 5 on bug 12522 from
It does not seem consistent to me in that online tester:
Regex: @@ V\?
Input: @@ D1
Outcome (in column labelled $var = $input =~ $regex): $var is a null string
This indicates to me that there is no match.

> What if you try: xml matches "\"@@ V\"?"
The \" at the beginning could be 
- an escaped quotation mark
- a backslash + a quotation mark
The \"? at the end could be
- an optional escaped quotation mark
- a backslash + an optional quotation mark

Perhaps you have hit the source of the problem: if a backslash is needed to
escape the quotation mark, then there needs to be a way of escaping the
backslash as well (\\).

If that is the case, I guess only option 2 is left:
> Expected behavior, option 2 (not preferred): a single backslash results in an invalid Regex, indicated by a red background in the display filter box. When using double backslashes, the display filter background becomes green.

Then, the documentation at https://wiki.wireshark.org/DisplayFilters should be
updated to make it clear that Wireshark does not use "clean" Regex but escaped
ones.


You are receiving this mail because:
  • You are watching all bug changes.