On 06/08/14 19:50, Paul Stead wrote:
body __LOC_DIGITS_CONFUSER / (\d{7,8}) .{1,250} ([0-9a-f]{32}) .{1,250}[\g1].{1,250}\g2/
Hmmm.. line breakage... \s instead of spaces?
body __LOC_DIGITS_CONFUSER /\s(\d{7,8})\s.{1,250}\s([0-9a-f]{32})\s.{1,250}\g1.{1,250}\g2/ Note that \g denotes a previous regex match, in this case it's matching $1 and $2 later in the string. Paul -- Paul Stead Systems Engineer Zen Internet