For Network IPS appliances, use these rules for post-PCRE modifiers to set compile-time-flags for regular expressions for OpenSignatures.
Rule | Description |
---|---|
A | Pattern must match only at the start of the buffer (same as ^). |
E | Set "$" to match only at the end of the subject string. Without E, "$" also matches immediately before the new character if it is a newline (but not before any other newlines). |
G | Inverts the "greediness" of quantifiers so they are not greedy by default, but become greedy if followed by "?". |
i | Not case-sensitive. |
m | Treats string as one big line of characters, where "^" and "$" match at the beginning and end of the string, immediately following or immediately before any newline in the buffer, as well as the start and end of the buffer. |
s | Includes newlines in the dot metacharacter. |
x | Ignores white space data characters in the pattern except when escaped or inside a character class. |