[Bro] Regular expression parenthesised groups

Seth Hall seth at icir.org
Wed Nov 5 05:48:04 PST 2014


> On Nov 5, 2014, at 12:02 AM, Nick Pratley <npratley at redhat.com> wrote:
> 
> If not I guess I can do this with the sub and split functions in a way similar to
> http://stackoverflow.com/questions/10126956/capture-value-out-of-query-string-with-regex but I just
> thought I'd ask.

Sorry, we don't have group capturing in our regular expressions.  Here's an example where I've used a split function to achieve a similar result...

https://github.com/bro/bro/blob/master/scripts/base/utils/paths.bro#L34

 .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/





More information about the Bro mailing list