[Bro] Script Question

Matthias Vallentin vallentin at icir.org
Tue Feb 21 16:07:48 PST 2012


> Another question, is there a way to force (enable) headers to be
> matched in a case sensitive way?

Seth answered that question already, but just to be clear: Bro
normalizes the headers to upper case. That is, each header name has one
unique (uppercase) representation at the scripting layer.

> So I figured I'd port it over and learn bro in the process so I could
> give it back to the community.

We're looking forward to it!

    Matthias



More information about the Bro mailing list