Re: What does /R mean in pcre?

[wkitty42--- via Snort-users <snort-users () lists snort org>]

On 9/1/19 8:21 AM, fluency0726 via Snort-users wrote:
> Hi all,
>         I'm trying to generate some traces that can trigger snort's alert to do 
> some performance test. But when I read some rules with pcre option, I met some 
> regular expressions that I didn't understand. Like the screenshot I attached 
> shows, the regular expression contains sR after the string boundary character 
> "/", I know that "s" is a modifier that set PCRE_DOTALL, however, I don't know 
> what does "R" mean here. I checked pcre docs and didn't find there's an "R" 
> modifier. So what does "R" mean here, is it a modifier or  something else? I'm 
> very confused about it. I would be very grateful if you can help me! Thx!

http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node32.html#pcre-mod_snort


--
 NOTE: No off-list assistance is given without prior approval.
       *Please keep mailing list traffic on the list unless*
       *a signed and pre-paid contract is in effect with us.*
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette