Ragrep hex support

[Carter Bullard]

Yes, this is a bug, and I've fixed it in the next client release.
When you pass '-e "\x41" to ragrep(), the shell would add an
escape and the string would be "\\x41" which is not what ragrep()
wants to see.

I have added logic to skip the first '\' if "\\" are encountered.
Not sure if this is going to be a great solution, but it seems to
work for the simple case.

Carter


On Nov 19, 2007, at 7:14 AM, CS Lee wrote:

> Hi Carter,
>
> Do you mean using \x as It seems doesn't work to me either.
>
> On Nov 19, 2007 7:57 PM, Carter Bullard <carter at qosient.com> wrote:
> You must write your match as a regular expression.  You can specify  
> hexidecimal numbers with regular expression.
>
> Carter
>
> Carter Bullard
> QoSient LLC
> 150 E. 57th Street Suite 12D
> New York, New York 10022
> +1 212 588-9133 Phone
> +1 212 588-9134 Fax
>
> -----Original Message-----
> From: "CS Lee" <geek00l at gmail.com>
>
> Date: Sun, 18 Nov 2007 17:46:15
> To:Argus <argus-info at lists.andrew.cmu.edu >
> Subject: [ARGUS] Ragrep hex support
>
>
> Hi Carter,
>
> When I try to use ragrep to perform regex matching, I realize that  
> it doesn't support hexadecimal value, can it for example support  
> something like this wiht -x option -
>
> ragrep -x '0xFFFFFF' -nnr argusdata
>
> I think it would be great instead of just ascii.
>
> Thanks.
>
>
> --
> Best Regards,
>
> CS Lee<geekooL[at]gmail.com>
>
> http://geek00l.blogspot.com
>  <http://geek00l.blogspot.com>
>
>
>
> -- 
> Best Regards,
>
> CS Lee<geekooL[at]gmail.com>
>
> http://geek00l.blogspot.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20071214/393cff84/attachment.html>