Thanks for your clarification Bruno. Just a quick question.
So what if I want to block just a string 'xe3'. But if this is embedded then ASA should not stop it. Best Regards. ______________________ Adil On May 5, 2011, at 12:49 PM, Jim Terry wrote: > Thank you! > > Jt > > > > > On Thu, May 5, 2011 at 9:02 AM, Bruno <[email protected]> wrote: > Keep in mind that the command test regex on ASAs first allows you to put the > text you need to be matched on and then your regex string > > So, the regex xe3 will match 0xe311 as well as DDDDDxe3DDDD and so on > > > On Thu, May 5, 2011 at 9:24 AM, Jim Terry <[email protected]> wrote: > Hi Kings, > > That helps, although still confused. For example: > > pixfirewall(config)# test regex 0xe311 xe3 > INFO: Regular expression match succeeded. > pixfirewall(config)# > so it seems my text is now matching only part of my regex? > > ideas, I am learning this but I am still missing something! > > JT > > > > On Thu, May 5, 2011 at 1:02 AM, Kingsley Charles <[email protected]> > wrote: > "\" to removes the special meaning of "x". > > > Snippet from > http://www.cisco.com/en/US/docs/security/ips/6.2/command/reference/crIntro.html > > Regular Expression Syntax > > Regular expressions are text patterns that are used for string matching. > Regular expressions contain a mix of plain text and special characters to > indicate what kind of matching to do. For example, if you are looking for a > numeric digit, the regular expression to search for is "[0-9]". The brackets > indicate that the character being compared should match any one of the > characters enclosed within the bracket. The dash (-) between 0 and 9 > indicates that it is a range from 0 to 9. Therefore, this regular expression > will match any character from 0 to 9, that is, any digit. > > To search for a specific special character, you must use a backslash before > the special character. For example, the single character regular expression > "\*" matches a single asterisk. > > The regular expressions defined in this section are similar to a subset of > the POSIX Extended Regular Expression definitions. In particular, "[..]", > "[==]", and "[::]" expressions are not supported. Also, escaped expressions > representing single characters are supported. A character can be represented > as its hexadecimal value, for example, \x61 equals `a,' so \x61 is an escaped > expression representing the character `a.' > > > > > With regards > Kings > > On Thu, May 5, 2011 at 8:43 AM, Jim Terry <[email protected]> wrote: > Hi all, > > I am trying to figure out regex and I want to test my input on the PIX. so I > did this and I expected it to match- but it did not: > > pixfirewall(config)# test regex 0x06 \x06 > INFO: Regular expression match failed. > > Can someone tell me why 0x06 and \x06 are not the same? > > Thanks, > > JT > > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > > > -- > Bruno Fagioli (by Jaunty Jackalope) > Cisco Security Professional > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
