Regex Rules

["Iures, Tudor-Cristian via Snort-sigs" <snort-sigs () lists snort org>]

Hello everybody,

I’m a third year Computer Science student doing a project on regular expressions. The use of regular expressions in 
Snort is one of my research topics. This paper 
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.154.6795&rep=rep1&type=pdf from 2008 is stating that 5549 of 
8536 Snort rules are using regular expressions and this source http://www.cs.bham.ac.uk/~hxt/research/rxxr2/ contains a 
list of 12499 Snort rules using regular expressions. However, the current Snort rules only contains 826 regex rules, 
considerably less.

My question is, why the drop in usage?

Thank you,

Tudor Iures

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!