Nicholas_Zurfl1
Nimbostratus
Nov 03, 2005How to ignore case
Greetings,
I am a frequent lurker of the devcentral forums.
Does anyone know of a way to parse a payload and ignore case? My challange is that I am dealing with a proprietary protocol and the developers could care less if their commands are "update" "Update" "UPDATE" "uPdAtE" etc...
Collect the TCP data from the session
when CLIENT_ACCEPTED {
log local0. "TCP client accepted..."
}
when CLIENT_DATA
Parse the payload for UPDATE
if { [TCP:payload] contains "UPDATE" <--- make this case insensitive
} {
log local0. "found UPDATE"
}
TCP::release
TCP::collect
TCP::notify response
log local0. "notify response"
}