diff --git a/src/detect-parse.c b/src/detect-parse.c index 2a6d7abbbe..75f2a2a4fd 100644 --- a/src/detect-parse.c +++ b/src/detect-parse.c @@ -25,10 +25,10 @@ static pcre_extra *option_pcre_extra = NULL; #define CONFIG_DP 6 #define CONFIG_OPTS 7 -// action protocol src sp dir dst dp options -#define CONFIG_PCRE "^([A-z]+)\\s+([A-z0-9]+)\\s+([\\[\\]A-z0-9\\.\\:_\\$\\!,//]+)\\s+([\\:A-z0-9_\\$\\!]+)\\s+(\\<-|-\\>|\\<\\>)\\s+([\\[\\]A-z0-9\\.\\:_\\$\\!,/]+)\\s+([\\:A-z0-9_\\$\\!]+)(?:\\s+\\((.*)?(?:\\s*)\\))?(?:(?:\\s*)\\n)?$" +// action protocol src sp dir dst dp options +#define CONFIG_PCRE "^([A-z]+)\\s+([A-z0-9]+)\\s+([\\[\\]A-z0-9\\.\\:_\\$\\!\\-,\\/]+)\\s+([\\:A-z0-9_\\$\\!]+)\\s+(\\<-|-\\>|\\<\\>)\\s+([\\[\\]A-z0-9\\.\\:_\\$\\!\\-,/]+)\\s+([\\:A-z0-9_\\$\\!]+)(?:\\s+\\((.*)?(?:\\s*)\\))?(?:(?:\\s*)\\n)?$" #define OPTION_PARTS 3 -#define OPTION_PCRE "^\\s*([A-z_0-9]+)(?:\\s*\\:(.*)(? !1.2.3.4 any (msg:\"SigParseTest01\"; sid:1;)"); if (sig == NULL) {