# Regarding pattern matching in bro

**URL:** <https://community.zeek.org/t/regarding-pattern-matching-in-bro/221>\
**Category:** Zeek\
**Created:** [March 22, 2002, 7:44am UTC](https://community.zeek.org/t/regarding-pattern-matching-in-bro/221 "2002-03-22T07:44:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vern](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/vern/32/630_2.png) [@Vern](https://community.zeek.org/u/Vern)\
**Post date:** [March 22, 2002, 7:44am UTC](https://community.zeek.org/t/regarding-pattern-matching-in-bro/221/1 "2002-03-22T07:44:57Z")

</div>

> Is it possible to do a pattern matching using bro scripts  
> for a hex pattern.  
> for eg:  
> "90 31 C0 99 52 52 B017 CD80 68 CC 73 68"  
> or it supports only pattern matching for strings.

What do you mean by a "hex pattern"? You can search for 8-bit regular  
expressions, e.g. /\x90\x31\xc0\x99/. Bro's regular expressions operate  
on strings, but strings can contain arbitrary binary data.

&nbsp;&nbsp;&nbsp;&nbsp;Vern

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/regarding-pattern-matching-in-bro/221/2 "2022-05-06T15:36:26Z")

</div>


