#9 Feature request

closed
Jordan Ritter
None
5
2006-09-11
2005-10-06
Anonymous
No

Hello! I think that a really useful feature would be to
be able to use several 'match' expressions in a boolean
expression.For example to filter a packet that contains
a certain expression,but does not contain the other.
Thank you.

Discussion

  • Jordan Ritter
    Jordan Ritter
    2006-09-11

    • assigned_to: nobody --> jpr5
    • status: open --> closed
     
  • Jordan Ritter
    Jordan Ritter
    2006-09-11

    Logged In: YES
    user_id=50338

    Thanks for the suggestion.

    I believe this may already be possible using PCRE and
    negative forward/lookahead assertions.

    However, I think the logical (and syntactic) complexity
    involved with managing variable, multiple regular
    expressions combined with boolean logic within the source
    itself would be prohibitive -- useful, I agree, but not
    enough to outweigh long-term stability and performance
    issues with such a significant change.

    Take a look at PCRE regular expressions, which I think can
    accomplish what you're looking for (though it may be a bit
    hairy).