Introduction
Just a notepad++ regex example for searching netscreen debug traces to start. I’ll update this one as I find other useful examples.
Examples:
Netscreen Debug Flow
To search netscreen debug flow output for particular traffic, try something like:
192.168.53.18/([0-9]+)->192.168.55.242/1984
Example debug flow data:
****** 6033888.0: <TSVR/ethernet1/0.2> packet received [497]******
ipid = 32175(7daf), @2d777114
packet passed sanity check.
flow_decap_vector IPv4 process
ethernet1/0.2:192.168.53.18/50543->192.168.55.242/1984,6, 5019(fin)<Root>
existing session found. sess token 17
flow got session.
flow session id 57004
flow_main_body_vector in ifp ethernet1/0.2 out ifp N/A
flow vector index 0x123, vector addr 0x3edc424, orig vector 0x3edc424
vsd 0 is active
tcp seq check.
flow_tcp_fin_vector()
post addr xlation: 192.168.53.18->192.168.55.242.
packet send out to 005056850002 through ethernet1/1.3
Clear all Comments from all lines
To clear all comments from a file, try a find and replace:
^[#].*
Leave the “Replace with” field blank to replace with nothing. The ^ indicates the start of a line, the [#;] is a character class to match either # or ;, and .* matches anything else in the line.
