[Bro] Question on snort2bro

Mengjun Xie mjxie2004 at gmail.com
Mon Apr 16 12:22:41 PDT 2007


I find that snort2bro doesn't support "pcre" option in snort rules. Could
anyone tell me the reason? I guess the complexity of dealing with
non-regular-expression features such as backreference in PCRE could be one
of the reasons. But I want to get a confirmed answer. Thanks!

Mengjun Xie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20070416/9773739f/attachment.html 

More information about the Bro mailing list