regex

Zeek
1

hi tianxin,

Bro uses flex regex -

http://flex.sourceforge.net/manual/Patterns.html#Patterns

By the way take a good read here -

http://blog.icir.org/2008/06/bro-signature-engine.html

Cheers!