You're right, it is application/sdp and the back slash works as escape character.

However, a new problem came. I'm using this, since someone upstream is adding \r\n to a part of the body :

replace_body_all("application/sdp\r\n\r\n", "application/sdp\r\n");

The regex finds the application/sdp just right, but doesn't replace everything. So, as a final result i get applicationapplication\sdp\r\n. Is this intended?

Thanks for your help