>I don't quite follow this syntax: >\nfrom:[^\r\n]+?(?:pfizer|viagra) >What's the second question mark followed byt he colon?
\nfrom:[^\r\n]+?(pfizer|viagra) will capture (reserves memory for, if found or not) what is inside the () \nfrom:[^\r\n]+?(?:pfizer|viagra) uses the () only for grouping the two values without capture the result (needs much less memory) As I've told you in my last post - if you forgot the '?:' , assp will insert that for you when compiling the regex. Thomas Von: K Post <nntp.p...@gmail.com> An: ASSP development mailing list <assp-test@lists.sourceforge.net> Datum: 22.05.2010 17:47 Betreff: Re: [Assp-test] BomgHeaderRE catch, but I don't understand why Thank you both! I'll look into this and get you the optimizer stuff when I return. Great tips! I will surely impement .*{1,x} and move those that should be in bomb sender or bomb subject as appropriate. I don't quite follow this syntax: \nfrom:[^\r\n]+?(?:pfizer|viagra) What's the second question mark followed byt he colon? On Sat, May 22, 2010 at 4:36 AM, Fritz Borgstedt <f...@iworld.de> wrote: > ASSP development mailing list <assp-test@lists.sourceforge.net> > schreibt: >>dear.*\d\d% OFF >>dear.*\d\d% oFF >>\nfrom:.*pfizer >>\nfrom:.*viagra > > Unlimited constructions like " >>.* > " are terrible wrong. > Use .*{1,80} instead. > > The log shows only the first ->RegEx Length in Log (RegExLength) > even when a match like >>nfrom:.*pfizer > can produce a string of several hundred or thousands of characters. > > > ------------------------------------------------------------------------------ > > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > ------------------------------------------------------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! *******************************************************
------------------------------------------------------------------------------
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test