Decoder: Regex

Document created by RSA Information Design and Development on Apr 21, 2016
Version 1Show Document
  • View in full screen mode

This topic defines language for the flex parser regex node.

Regex searches the stream payload starting at the read position for matches to a provided regular expression. If matches are found, the offset from the read position and, optionally the matched string, is returned. Any child elements execute. If no matches are found, child elements do not execute.

Language Definition

Attribute NameDescription
namenumber variable to receive the offset from the read position where the match begins.
valueA regular expression to find.
length (optional)A limit to the length of the payload to be searched. If a limit is not provided, the remainder of the payload is searched. It is recommended to always use the smallest value possible here in order to reduce the effect on performance. 
found (optional)The name of a string variable to receive a matched string.