Re: Issue with pcre

["Joel Esler (jesler)" <jesler () cisco com>]

> On Oct 6, 2014, at 5:31 PM, lists () packetmail net wrote:
>
> On 10/06/2014 04:27 PM, Joel Esler (jesler) wrote:
> > “only” on a fast_pattern is case insensitive.  you don’t need the nocase.
>
> He had to remove the 'only', Snort was vomiting on fast_pattern:only on a
> singular content match with a PCRE -- see my earlier quoted reply.  Thanks

There’s nothing wrong with what you wrote.  Works fine for me.

Attachment: smime.p7s
Description:

------------------------------------------------------------------------------
Slashdot TV.  Videos for Nerds.  Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!