[Bro] Question on snort2bro
Mengjun Xie
mjxie2004 at gmail.com
Mon Apr 16 12:22:41 PDT 2007
Hello,
I find that snort2bro doesn't support "pcre" option in snort rules. Could
anyone tell me the reason? I guess the complexity of dealing with
non-regular-expression features such as backreference in PCRE could be one
of the reasons. But I want to get a confirmed answer. Thanks!
Mengjun Xie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20070416/9773739f/attachment.html
More information about the Bro
mailing list