[Bro] three things

[Robin Sommer]

On Mon, Feb 05, 2007 at 15:41 -0500, Seth Hall wrote:

> Is the bro policy language pattern matching code separate from the  
> signature pattern matching code?  ".*" matches across newlines for me  
> in signatures.

The code is the same but internally there is actually a flag
toggling multiline matching; it's enabled for signatures but not for
script-level regexps.

Robin

-- 
Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
LBNL/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org