simple pattern question

Terry Barker Terry.Barker at
Wed Jul 14 13:22:08 PDT 2004

OK, yeah that DOES do it. Thanks for your help.

> -----Original Message-----
> From: Vern Paxson [mailto:vern at]
> Sent: Wednesday, July 14, 2004 12:58 PM
> To: Terry Barker
> Cc: Robin Sommer; bro at
> Subject: Re: simple pattern question
> > 	I had tried that. Still no luck.
> Be sure to double-check your setup.  I ran your original signature
> and indeed there was no match, and then made the change to /.*version/
> that Robin indicated and it now does indeed match.  (no need to include
> ntp.bro, but it doesn't hurt either)
> 		Vern

More information about the Bro mailing list