> > So.. We came up with: > > > > .*Sendmail.*(Switch\-((1\.)|(2\.(0\.|1\.[0-4])))|(\/|UCB | )([5-7]|8\.([0-9](\.|;|$)|1[01]\.|12\.[0-7](\/| |\.|\+)))).* > > > > Would not it be better to have done multiple regexes ? I'll include > Michael's original regex in addition to yours for a short, just in > case... His would cause false positives though.. I could split this regex up, it just seemed appropriate to toss them all in one. -- Erik Parker, CISSP Digital Defense, Inc. 1711 Citadel Plaza San Antonio, Texas 78209 210.822.2645
This archive was generated by hypermail 2b30 : Mon Mar 03 2003 - 13:02:15 PST