Snort mailing list archives
regex
From: "Fabio Panigatti" <bio () despammed com>
Date: Mon, 14 Oct 2002 13:12:40 +0200
How many characters a "*" can match with regex? It seems like
there's a maximum number of characters after which the regexp
doesn't match the pattern anymore (about five characters).
Is it true or I missed something?
If it is true, is there a compile time option (or a patch) to
extend this limit?
Only one example: a regex rule 'content: "hello*world";' will
match the string hello1234world but it won't match the string
hello123456world.
I'm sorry, but I'm not skilled enough to fully understand the
c code of the snort sources.
Fabio
PS: yes, I know that my english language skills need a lot of
improvement too :)
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- regex Fabio Panigatti (Oct 14)
