[Bro-Dev] [JIRA] (BIT-1497) pattern [:space:] shortcut not matching as expected
Lloyd Brown (JIRA)
jira at bro-tracker.atlassian.net
Thu Oct 22 14:02:00 PDT 2015
Lloyd Brown created BIT-1497:
Summary: pattern [:space:] shortcut not matching as expected
Project: Bro Issue Tracker
Issue Type: Problem
Affects Versions: 2.4
Environment: Running tests using Bro 2.4.1 (precompiled from http://download.opensuse.org/repositories/network:/bro/xUbuntu_14.10/) on Ubuntu 14.10.
Running using a simple "/opt/bro/bin/bro myscript.bro" syntax.
Reporter: Lloyd Brown
Attachments: patterns.space_shortcut.testcase.bro, patterns.space_shortcut.testcase.bro.output
I'm trying to do some RegEx-like pattern matching of a data stream using Bro, and I'm finding that, at least some of the shortcuts, like '[:space:]' don't seem to act as expected.
In short, I expected that '[:space:]' and '[ \f\n\r\t\v]' would be interchangeable, but that doesn't seem to be the case. I have not tested any other shortcuts like '[:alpha:]', '[:digit:]', etc. Just '[:space:]' so far.
I will attach an example script, as well as a file containing the output I'm seeing.
This message was sent by Atlassian JIRA
More information about the bro-dev