On Sat, Feb 17, 2007 at 10:03:47PM -0400, Daniel Cid wrote: > > hi Kayvan,
Hi Daniel. > Parenthesis are used to extract data from the regexes, so if you want to use > them, you need to escape them with "\" before. Great. That makes sense, since I'm familiar with regular expressions. However, the documentation on the ossec web site does not talk about parenthesis, and since the OSSEC regex library is customized, there's no guarantee that it works the same as the normal regex library. I've made the change. We'll see by tomorrow morning whether it worked. -- Kayvan A. Sylvan | Proud husband of | Father to my kids: Sylvan Associates, Inc. | Laura Isabella Sylvan, | Katherine Yelena (8/8/89) http://sylvan.com/~kayvan | my beautiful Queen. | Robin Gregory (2/28/92)
