0

I know there are lot of regex for the purpose, but in my case the regex i want to write is one that matches following payload

 ...............sssfdf.makememad.com...... ........makemadcom..... dfdfddd makeme.ru....... also ...makeme.net....... 

I just want to match anything with following

.ru .net .com 

And due to some limitations of the software in which im using the regex it won't allow to do this

\. 

so any regex which skips this would be great.

Thanks.

3
  • How do you escape a period then in your engine then, what engine are you using? Also that looks like the text dump from a hex editor. Are all those periods really periods or are they really unprintable text from a hex editor. Please provide more detail about how you are trying to do what you want to do. I would put money that whatever language you are using uses \ as a escape character so you need to escape the escape via something like "\\." Commented Aug 22, 2013 at 19:17
  • the engine works fine on other traffic but one particular application traffic e.g dns it won't work. Its closed system SIEM solution. The engine uses java regex Commented Aug 22, 2013 at 19:18
  • Well java supports escaping metacharaters with a slash Commented Aug 22, 2013 at 19:42

1 Answer 1

2

Use a character class since you don't need to escape:

[.](ru|net|com) 

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.