diff options
author | Guy Harris <guy@alum.mit.edu> | 2003-07-30 22:08:45 +0000 |
---|---|---|
committer | Guy Harris <guy@alum.mit.edu> | 2003-07-30 22:08:45 +0000 |
commit | 2262452f35b7d1347a394e27d650af14e0f15d6b (patch) | |
tree | 4a0d57290694705b31b8cd4727b91c6ca11a3331 /doc | |
parent | 657700ca0d11a9c07141dc3dd829d10272a5eb19 (diff) |
Fix a typo.
Note that, inside double quotes, you must escape backslashes with
backslashes.
svn path=/trunk/; revision=8104
Diffstat (limited to 'doc')
-rw-r--r-- | doc/ethereal.pod.template | 9 | ||||
-rw-r--r-- | doc/tethereal.pod.template | 9 |
2 files changed, 16 insertions, 2 deletions
diff --git a/doc/ethereal.pod.template b/doc/ethereal.pod.template index f00721c337..1f5e5bb175 100644 --- a/doc/ethereal.pod.template +++ b/doc/ethereal.pod.template @@ -1337,7 +1337,7 @@ Strings are enclosed in double-quotes: http.request.method == "POST" -Inside doulbe quotes, you may use the backslash to embed a double-quote, +Inside double quotes, you may use the backslash to embed a double-quote, or an arbitrary byte represented in either octal or hexadecimal. browser.comment = "An embedded \" double-quote" @@ -1350,6 +1350,13 @@ Use of octal to look for "HEAD": http.request.method == "\x110EAD" +This means that you must escape backslashes with backslashes inside +double quotes: + + smb.path == "\\\\SERVER\\SHARE" + +to look for \\SERVER\SHARE in "smb.path". + A slice operator also exists. You can check the substring (byte-string) of any protocol or field. For example, you can filter on the vendor portion of an ethernet address (the first three bytes) like diff --git a/doc/tethereal.pod.template b/doc/tethereal.pod.template index afadbee172..d24e8fe195 100644 --- a/doc/tethereal.pod.template +++ b/doc/tethereal.pod.template @@ -677,7 +677,7 @@ Strings are enclosed in double-quotes: http.request.method == "POST" -Inside doulbe quotes, you may use the backslash to embed a double-quote, +Inside double quotes, you may use the backslash to embed a double-quote, or an arbitrary byte represented in either octal or hexadecimal. browser.comment = "An embedded \" double-quote" @@ -690,6 +690,13 @@ Use of octal to look for "HEAD": http.request.method == "\x110EAD" +This means that you must escape backslashes with backslashes inside +double quotes: + + smb.path == "\\\\SERVER\\SHARE" + +to look for \\SERVER\SHARE in "smb.path". + A slice operator also exists. You can check the substring (byte-string) of any protocol or field. For example, you can filter on the vendor portion of an ethernet address (the first three bytes) like |