[Bro] Script Question
vallentin at icir.org
Tue Feb 21 16:07:48 PST 2012
> Another question, is there a way to force (enable) headers to be
> matched in a case sensitive way?
Seth answered that question already, but just to be clear: Bro
normalizes the headers to upper case. That is, each header name has one
unique (uppercase) representation at the scripting layer.
> So I figured I'd port it over and learn bro in the process so I could
> give it back to the community.
We're looking forward to it!
More information about the Bro