Hi all,
Does anyone know if Bro signatures support reverse lookups? I attempted one but it failed to compile. Just wanted to check before I pull my hair out messing with the syntax 
Thanks!
Josh
See here:
https://www.bro.org/sphinx-git/frameworks/signatures.html
And here:
http://flex.sourceforge.net/manual/Patterns.html
-AK
Cool, thanks for the reference. I’ll poke at this tomorrow and see what I come up with.