[Bro] couple of questions

[Mark Dedlow]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> 2) Is is possible in a policy file to perform a size comparison on a string? 
> For example, if you wanted to see if a filename was longer than a certain length. How would you sizeof a string value? 

local filename = "foobar"
if ( byte_len(filename) > n ) ...


Mark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEIB9JjgpF4tNDKlsRArT1AJ9cOaQ+OqQF42R4r62xlEDlP2sSMQCgjVeO
y/ZmyokNILLukR3UIQxRHEA=
=ykhV
-----END PGP SIGNATURE-----