Hello,
Please let me know how can I test HS extented parameters with pcapscan. The
pcapscan shows "Unsupported flag '{'"" when I add HS extended
parameter. Am
I missing anything here?
~/hyperscan/build/bin# ./hscheck -e pattern.txt
OK: 1:/foo.*bar/{min_offset=10}
SUMMARY: 0 of 1 failed.
~/hyperscan/build/bin# ./pcapscan -n 10 pattern.txt data.pcap
Pattern file: pattern.txt
Unsupported flag '{'
I have installed HS version 5.0.0
Thanks,
Sooraj
Show replies by date
Hi Sooraj,
I think pcapscan.cc doesn’t support extended flags. You may need to add
HS_EXT_FLAG_MIN_OFFSET flag when compile your pattern in pcapscan.cc.
Thanks,
Xiang
From: Hyperscan [mailto:hyperscan-bounces@lists.01.org] On Behalf Of Sooraj KS
Sent: Tuesday, October 23, 2018 4:46 PM
To: hyperscan(a)lists.01.org
Subject: [Hyperscan] pcapscan
Hello,
Please let me know how can I test HS extented parameters with pcapscan. The pcapscan shows
"Unsupported flag '{'"" when I add HS extended parameter. Am I
missing anything here?
~/hyperscan/build/bin# ./hscheck -e pattern.txt
OK: 1:/foo.*bar/{min_offset=10}
SUMMARY: 0 of 1 failed.
~/hyperscan/build/bin# ./pcapscan -n 10 pattern.txt data.pcap
Pattern file: pattern.txt
Unsupported flag '{'
I have installed HS version 5.0.0
Thanks,
Sooraj