Re: [mod-security-users] Fwd: strmatch vs. pm

[Breno S. <bre...@gm...>]

We want this syntax... since we are working to port some ET rules
(snort/suricata) to CRS

Yes.. i will update it in the wiki.

Thanks

Breno

On Mon, May 23, 2011 at 5:24 AM, Nick Gearls <nic...@gm...> wrote:

>  > This operator (@strmatch) now supports the syntax :
>  > | 00 A4 B5|  or  b|65|eno to allow special chars
>
> That's very practical, but why a new syntax when we're already using the
> regex syntax in most rules?
> Why not "b\x65eno"?
> This would be more orthogonal, and also allow may be later for other
> syntaxes ("\b", etc.)
>
> Would it be possible to add the complete description of the syntax to
> the wiki (for all operators that have one).
>
> Thanks
>
> Nick
>
>
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its
> next-generation tools to help Windows* and Linux* C/C++ and Fortran
> developers boost performance applications - including clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> ModSecurity Services from Trustwave's SpiderLabs:
> https://www.trustwave.com/spiderLabs.php
>