[Bro] Bro regex documentation

sridhar basam sri at basam.org
Fri Jan 21 07:04:17 PST 2011


On Thu, Jan 20, 2011 at 3:23 PM, Seth Hall <seth at icir.org> wrote:

>
> On Jan 20, 2011, at 2:37 PM, sridhar basam wrote:
>
> > I am trying to look for specific patterns in a tcp stream and need to be
> able to log out said patterns to a file.
>
>
> Why don't the string splitting functions (defined in strings.bif) work for
> your scenario?
>
>

Yeah, those can be used together to see what i want. Wanted to see if there
was something similar to the match function in gawk where the function
returns an array of all of the variables you collect in your pattern. I
didn't see anything like it.

 Sridhar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20110121/46eae1f2/attachment.html 


More information about the Bro mailing list