[data_scanner] hack to recognize some windows paths

Fixes #1018
pull/1031/head
Tim Stack 2 years ago
parent 23ab1abd73
commit a2c35140ba

File diff suppressed because it is too large Load Diff

@ -165,7 +165,7 @@ bool data_scanner::tokenize2(pcre_context &pc, data_token_t &token_out)
return true;
}
[a-zA-Z0-9]+":/""/"?[^\x00\r\n\t '"[\](){}]+[/a-zA-Z0-9\-=&?%] { RET(DT_URL); }
("/"|"./"|"../")[a-zA-Z0-9_\.\-\~/!@#$%^&*()]* { RET(DT_PATH); }
("/"|"./"|"../"|[A-Z]":\\"|"\\\\")("Program Files"(" (x86)")?)?[a-zA-Z0-9_\.\-\~/\\!@#$%^&*()]* { RET(DT_PATH); }
(SPACE|NUM)NUM":"NUM{2}/[^:] { RET(DT_TIME); }
(SPACE|NUM)NUM?":"NUM{2}":"NUM{2}("."NUM{3,6})?/[^:] { RET(DT_TIME); }
[0-9a-fA-F][0-9a-fA-F](":"[0-9a-fA-F][0-9a-fA-F])+ {

@ -256,6 +256,8 @@ dist_noinst_DATA = \
datafile_simple.18 \
datafile_simple.19 \
datafile_simple.20 \
datafile_simple.21 \
datafile_simple.22 \
datafile_xml.0 \
dhcp.pcapng \
dhcp-trunc.pcapng \

@ -0,0 +1,9 @@
C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
key 0:0
path 0:63 ^-------------------------------------------------------------^ C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
pair 0:63 ^-------------------------------------------------------------^ C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
msg :C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
format :#
{
"col_0": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\new_chrome.exe"
}
Loading…
Cancel
Save