The following checks the CaptureSource parameter and only takes those captured via the PCAv2:
REQFilterTCL=string equal "TealeafPassiveCapture2" [REQBufVal "CaptureSource"]
The following is identical to above except that string comparison is case-insensitive:
REQFilterTCL=string equal -nocase "TealeafPassiveCapture2"
[REQBufVal "CaptureSource"]
The following tests if the string "test" is contained anywhere in the HTTP_HOST value:
REQFilterTCL=string first "test" [REQBufVal "HTTP_HOST"]
Note the string first
operation is always case-sensitive, so there is no -nocase
parameter.
The following is identical to above except test is case-insensitive:
REQFilterTCL=regexp -nocase -- "test" [REQBufVal "HTTP_HOST"]
The following tests if the LOCAL_ADDR parameter contains any of these IP addresses: 10.10.10.10
, 10.10.10.14
, or 10.10.10.18
"
REQFilterTCL=regexp -- "10.10.10.(10|14|18)" [REQBufVal "LOCAL_ADDR"]