Regular expression parenthesised groups

Hi, is there a way to capture groups as part of a regular expression using parentheses in a Bro
script? For example, to extract the value of a query string variable in a URI - /foo=([^&]*)/ - I
just want the value in the parentheses.

If not I guess I can do this with the sub and split functions in a way similar to but I just
thought I'd ask.


Sorry, we don't have group capturing in our regular expressions. Here's an example where I've used a split function to achieve a similar result...


Thanks Seth. I did manage to get it working using split.