Ragrep hex support

[CS Lee]

Hi Carter,

Thanks, I will try out when next release is shipped.

Cheers ;]

On Dec 15, 2007 12:11 AM, Carter Bullard <carter at qosient.com> wrote:

> Yes, this is a bug, and I've fixed it in the next client release.When you
> pass '-e "\x41" to ragrep(), the shell would add an
> escape and the string would be "\\x41" which is not what ragrep()
> wants to see.
>
> I have added logic to skip the first '\' if "\\" are encountered.
> Not sure if this is going to be a great solution, but it seems to
> work for the simple case.
>
> Carter
>
>
> On Nov 19, 2007, at 7:14 AM, CS Lee wrote:
>
> Hi Carter,
>
> Do you mean using \x as It seems doesn't work to me either.
>
> On Nov 19, 2007 7:57 PM, Carter Bullard <carter at qosient.com> wrote:
>
> > You must write your match as a regular expression.  You can specify
> > hexidecimal numbers with regular expression.
> >
> > Carter
> >
> > Carter Bullard
> > QoSient LLC
> > 150 E. 57th Street Suite 12D
> > New York, New York 10022
> > +1 212 588-9133 Phone
> > +1 212 588-9134 Fax
> >
> > -----Original Message-----
> > From: "CS Lee" <geek00l at gmail.com>
> >
> > Date: Sun, 18 Nov 2007 17:46:15
> > To:Argus <argus-info at lists.andrew.cmu.edu >
> > Subject: [ARGUS] Ragrep hex support
> >
> >
> > Hi Carter,
> >
> > When I try to use ragrep to perform regex matching, I realize that it
> > doesn't support hexadecimal value, can it for example support something like
> > this wiht -x option -
> >
> > ragrep -x '0xFFFFFF' -nnr argusdata
> >
> > I think it would be great instead of just ascii.
> >
> > Thanks.
> >
> >
> > --
> > Best Regards,
> >
> > CS Lee<geekooL[at]gmail.com>
> >
> > http://geek00l.blogspot.com
> >  <http://geek00l.blogspot.com>
> >
>
>
>
> --
> Best Regards,
>
> CS Lee<geekooL[at]gmail.com>
>
> http://geek00l.blogspot.com
>
>
>


-- 
Best Regards,

CS Lee<geek00L[at]gmail.com>

http://geek00l.blogspot.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20071215/51e59a67/attachment.html>