On Wed, 28 May 2014 10:47:35 -0700 (PDT)
John Hardin <jhar...@impsec.org> wrote:

John> The only place I've found backreferences useful is when writing a
John> header rule that is looking for the same string in multiple
John> headers.

John> Other than that, captures are very rare.

There was a pattern in the recent campaigns where backreferences would
be perfect.  So far I have been busy trying other approaches but I may
come back to that.

Example at

http://pastebin.com/KUJAWdHq

-- 
Please *no* private copies of mailing list or newsgroup messages.

Reply via email to