Ad Widget

Collapse

Regular Expression not evaluated properly

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • bbs2web
    Junior Member
    • Apr 2016
    • 22

    #1

    Regular Expression not evaluated properly

    I have extended the 'Network interfaces for discovery' regular expression to filter out the following two interfaces which appear in Windows 2008 and 2012:
    Microsoft ISATAP Adapter
    isatap.{801D2331-6EFF-410D-B780-6E6473B5E353}

    The regular expression is:
    Code:
    ^(Microsoft ISATAP|isatap\.{)
    Both adapters continue to be discovered and I have validated it:
    Code:
    [davidh@j14dc3tj ~]# echo -e 'Microsoft ISATAP Adapter\nisatap.{801D2331-6EFF-410D-B780-6E6473B5E353}' | grep -E '^(Microsoft ISATAP|isatap\.{)'
    Microsoft ISATAP Adapter
    isatap.{801D2331-6EFF-410D-B780-6E6473B5E353}
    I assume the curly bracket is perhaps reserved for macros?
    Last edited by bbs2web; 15-04-2016, 15:41. Reason: Missing escape for '.'
  • bbs2web
    Junior Member
    • Apr 2016
    • 22

    #2
    One has to escape out the curly bracket

    Works when one escapes out the curly bracket:
    Code:
    ^(Microsoft ISATAP|isatap\.\{)

    Comment

    • cesarsj
      Senior Member
      • Dec 2018
      • 154

      #3
      Also adds this filter on discovery. But I'm curious: in which case would I need to monitor this interface? I saw briefly here that ISATAP serves to transition packets from IPv4 to IPv6 addresses.

      Why didn't the team that made Template OS Windows add this filter by default? It is another curiosity.

      Comment

      Working...