[Bro] three things

Seth Hall seth at net.ohio-state.edu
Mon Feb 5 12:41:17 PST 2007


On Feb 5, 2007, at 3:30 PM, Robin Sommer wrote:

> Thanks! I'm now able to confirm it, and I will look into it. I'm
> pretty sure that it's because ".*" does not match across new-lines.
> However, I need to check whether we can change that or whether that
> would break something else.

Is the bro policy language pattern matching code separate from the  
signature pattern matching code?  ".*" matches across newlines for me  
in signatures.

   .Seth



More information about the Bro mailing list