[Bro] Regular expression parenthesised groups

Seth Hall seth at icir.org
Wed Nov 5 05:48:04 PST 2014

> On Nov 5, 2014, at 12:02 AM, Nick Pratley <npratley at redhat.com> wrote:
> If not I guess I can do this with the sub and split functions in a way similar to
> http://stackoverflow.com/questions/10126956/capture-value-out-of-query-string-with-regex but I just
> thought I'd ask.

Sorry, we don't have group capturing in our regular expressions.  Here's an example where I've used a split function to achieve a similar result...



Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list