Thanks. I tried it with that tested and it matches. I'm no expert so maybe my assumptions are wrong. ASSP seems to do a case insensitive match so when I use that tester for pcre I enter the pattern as this:
/received\:.*?by.school\.mydomain\.org.with.microsoft/i My haystack is a single line of the message Received: from fk-out-0910.google.com ([192.168.1.254]) by school.mydomain.org with Microsoft SMTPSVC(6.0.3790.3959); That finds a match so is it reasonable to assume that putting this as a single line in npRe should work?: received\:.*?by.school\.mydomain\.org.with.microsoft That does not work but this does: by.school\.mydomain\.org.with.microsoft It's kind of academic interest at this point but, even so, I'm curious to know why it doesn't work. I also tried grep on a Linux machine as a testing tool and that matches too. I did something like: cat 13444.eml | grep -P -i "received\:.*?by.school\.mydomain\.org.with.microsoft" Ross On Mon, Dec 29, 2008 at 3:07 AM, GrayHat <[email protected]> wrote: >> - use a tester for perl regex > > just in case someone needs such a tester... > > http://www.quanetic.com/regex.php > > :) > > > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
