Snort mailing list archives
Re: What does /R mean in pcre?
From: wkitty42--- via Snort-users <snort-users () lists snort org>
Date: Sun, 1 Sep 2019 13:07:44 -0400
On 9/1/19 8:21 AM, fluency0726 via Snort-users wrote:
Hi all,I'm trying to generate some traces that can trigger snort's alert to do some performance test. But when I read some rules with pcre option, I met some regular expressions that I didn't understand. Like the screenshot I attached shows, the regular expression contains sR after the string boundary character "/", I know that "s" is a modifier that set PCRE_DOTALL, however, I don't know what does "R" mean here. I checked pcre docs and didn't find there's an "R" modifier. So what does "R" mean here, is it a modifier or something else? I'm very confused about it. I would be very grateful if you can help me! Thx!
http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node32.html#pcre-mod_snort -- NOTE: No off-list assistance is given without prior approval. *Please keep mailing list traffic on the list unless* *a signed and pre-paid contract is in effect with us.* _______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: snort-users-leave () lists snort org Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
Current thread:
- What does /R mean in pcre? fluency0726 via Snort-users (Sep 01)
- Message not available
- Message not available
- Re: What does /R mean in pcre? Dorian ROSSE via Snort-users (Sep 01)
- Re: What does /R mean in pcre? Dorian ROSSE via Snort-users (Sep 01)
- Re: What does /R mean in pcre? Dorian ROSSE via Snort-users (Sep 01)
- Message not available
- Message not available
- Re: What does /R mean in pcre? wkitty42--- via Snort-users (Sep 01)
- Re: What does /R mean in pcre? Joel Esler (jesler) via Snort-users (Sep 01)
- Re: What does /R mean in pcre? fluency0726 via Snort-users (Sep 01)