[Bro] Bro regex documentation

Robin Sommer robin at icir.org
Fri Jan 21 09:47:37 PST 2011


On Thu, Jan 20, 2011 at 15:23 -0500, Seth wrote:

> > Does bro support back-references?
> 
> No.  I'll let Robin or Vern give more detail here if they want to,

The quick answer here is that Bro matches regexps with DFAs. While
DFAs are very efficient, they can't do backreferences.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



More information about the Bro mailing list