On 1/2/15 6:08 AM, "Martin Gregorie" <mar...@gregorie.org> wrote:
>The resulting >regexes pass SA lint tests and match example spam when run as, for >instance > > grep -P '\&\#959;' <saved_spam.txt > >but don't generate hits when used in an SA body rule as: > > body MG_OBFUSCATION /\&\#959;/ Wouldn't that have to be a rawbody rule? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com
