Case insensitive pattern matching

Zeek
1

How does one do insensitive pattern matching in Bro?

ie similar to /test/i

I saw this topic come up on the forum earlier, but I didn't notice a
response to that part of the question.

Is there a way to do it that doesn't use [tT][eE][sS][tT] format? :slight_smile:

Thank you,

Randy

http://www.frenzy.org
"Sed Quis Custodiet Ipsos Custodes?" -Juvenal

2

Is there a way to do it that doesn't use [tT][eE][sS][tT] format? :slight_smile:

Unfortunately, no. I agree that this is lame and have been meaning to add
an &insensitive attribute that marks a regular-expression as case-insensitive
but um no luck finding time for it so far.

    Vern

3

No, unfortunately there isn't yet.

Robin