{"action":"closed","issue":{"url":"https://api.github.com/repos/Ettercap/ettercap/issues/909","repository_url":"https://api.github.com/repos/Ettercap/ettercap","labels_url":"https://api.github.com/repos/Ettercap/ettercap/issues/909/labels{/name}","comments_url":"https://api.github.com/repos/Ettercap/ettercap/issues/909/comments","events_url":"https://api.github.com/repos/Ettercap/ettercap/issues/909/events","html_url":"https://github.com/Ettercap/ettercap/issues/909","id":358607137,"node_id":"MDU6SXNzdWUzNTg2MDcxMzc=","number":909,"title":"Error using regex in filter","user":{"login":"TotoMerumeni","id":42208314,"node_id":"MDQ6VXNlcjQyMjA4MzE0","avatar_url":"https://avatars2.githubusercontent.com/u/42208314?v=4","gravatar_id":"","url":"https://api.github.com/users/TotoMerumeni","html_url":"https://github.com/TotoMerumeni","followers_url":"https://api.github.com/users/TotoMerumeni/followers","following_url":"https://api.github.com/users/TotoMerumeni/following{/other_user}","gists_url":"https://api.github.com/users/TotoMerumeni/gists{/gist_id}","starred_url":"https://api.github.com/users/TotoMerumeni/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TotoMerumeni/subscriptions","organizations_url":"https://api.github.com/users/TotoMerumeni/orgs","repos_url":"https://api.github.com/users/TotoMerumeni/repos","events_url":"https://api.github.com/users/TotoMerumeni/events{/privacy}","received_events_url":"https://api.github.com/users/TotoMerumeni/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-09-10T12:47:38Z","updated_at":"2018-09-15T19:57:14Z","closed_at":"2018-09-15T19:57:13Z","author_association":"NONE","body":"Hello, I'm using the current script for filter the incoming packet and change the content of web pages' body tag with the \"replaced\" text. But the \"pcre_refex\" function seems not to work with regex (like the normal \" replace\" one).\r\nLike specified in the MAN of etterfilter I've installed libpcre3 and libpcre3-dev (apt-get install libpcre3 libpcre3-dev) but I'm it's always not working.\r\n\r\nEttercap version: 0.8.2\r\n\r\nCode:\r\nif (ip.proto == TCP && tcp.dst == 80) {\r\n   if (search(DATA.data, \"Accept-Encoding\")) {\r\n      replace(\"Accept-Encoding\", \"Accept-Rubbish!\"); \r\n      msg(\"zapped Accept-Encoding!\\n\");\r\n   }\r\n}\r\n\r\nif (ip.proto == TCP && tcp.dst == 80) {\t\r\n  pcre_regex(DATA.data, \"<BODY((.|[\\n\\r])*)<\\/BODY>\", \"replaced\");\r\n  pcre_regex(DATA.data, \"<body((.|[\\n\\r])*)<\\/body>\", \"replaced\");\r\n}\t\r\n\r\n"}}
{"actor":{"display_login":"koeppea"}}