[Bro] Is there a regex that can be used to match the uids in the logs?

James Lay jlay at slave-tothe-box.net
Wed May 21 16:58:08 PDT 2014


On Wed, 2014-05-21 at 20:35 -0300, Paul Halliday wrote:
> Thanks.
> 
> 
> 
> 
> -- 
> Paul Halliday
> http://www.pintumbler.org/
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro


This should get you there Paul:

egrep -o '[0-9a-zA-Z]{18}'

James
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140521/fba5fa8c/attachment.html 


More information about the Bro mailing list