[TF] recasting

[jobs at sans.c. (jobs)]

    /if ({P1} =~ "infravision"|\
    "sense anger")\
  /then cast "%P1"

c infravision
infravision
% casting: unexpected /THEN in THEN block
c 'sense anger'
sense anger
% casting: unexpected /THEN in THEN block


    /if ({P1} =/ {infravision|\
    "sense anger"}\

c infravision
c 'sense anger'
infravision
% casting: unmatched %{ or illegal character '|'
sense anger
% casting: unmatched %{ or illegal character '|'


 > /help expressions will be your friend.

NOT yet it hasn't!

Brent Neal wrote:
> At 10:12 -0500 4/2/03, jobs wrote:
> 
>>
>>
>> I tried this several diff ways
>> /if P1 == infravision|\
>> /if (%P1 == infravision|\
>> /if (%P1 == (infravision|\
>> /if (P1 ==  infravision|\
>> /if (P1 ==  (infravision|\
> 
> 
> 
> Try:  /if ({P1} =~ "infravision")
> 
> '==' is numerical equality,  =~ is string equality.
> 
> You may want to look at '=/' which matches glob patterns, so you could 
> say /if ({P1} =/ {infravision | ultravision | hypervision | overvision} ...
> 
> /help expressions will be your friend.
> 
> 
> B
> 
> 


-- 
Jason Weiss
Technical Recruiter
SANS Consulting, Inc.
90 John street, #313
New York, NY 10038
Phone: 212-616-4800
Fax: 212-616-4805
Email: Ja...@sa...
AOL Instant Messenger: JasonWSans