This isn't a request, more
an open discussion.
Would it be good to program
a default counter function in SA so that users may custom write rules using it.
IE a simple function call in SA called 'counter' instead of header. Then you
simply feed it a regex and give it a minimum.
counter MY_TEST <br>
,5
this would mean if the term
<br> is found in the rawbody at least 5 times, then it is a hit.
(OH, and I have no clue how
to program this!)
Thoughts?
Chris Santerre
System Admin
"A little nonsense now and
then, is relished by the wisest men." - Willy Wonka
