OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: [cti] STIX Patterning - ALONG/OTHERWISE


Jason Keirstead wrote this message on Wed, Dec 14, 2016 at 16:28 -0400:
> I would argue though that makes that obvious (or non-obvious) however are 
> the square brackets or lack thereof, not the operator name.

Should I have added spaces to replace the square brackets so it would
of been even harder to tell the difference? :)

[ipv4-addr:value = '192.0.2.5'] AND [ipv4-addr:value = '192.0.2.10']
and
[ipv4-addr:value = '192.0.2.5'  AND  ipv4-addr:value = '192.0.2.10']


> From:   John-Mark Gurney <jmg@newcontext.com>
> To:     Eric Burger <Eric.Burger@georgetown.edu>
> Cc:     "cti@lists.oasis-open.org" <cti@lists.oasis-open.org>
> Date:   12/14/2016 04:24 PM
> Subject:        Re: [cti] STIX Patterning - ALONG/OTHERWISE
> Sent by:        <cti@lists.oasis-open.org>
> 
> 
> 
> Eric Burger wrote this message on Tue, Dec 13, 2016 at 09:52 -0500:
> > So if something does the same thing in the same way, we want to call it 
> something else?
> > 
> > I?m a bit slow here...
> 
> I prefer the different operators as it makes it more obvious that
> [ipv4-addr:value = '192.0.2.5'] AND [ipv4-addr:value = '192.0.2.10']
> and
> [ipv4-addr:value = '192.0.2.5' AND ipv4-addr:value = '192.0.2.10']
> 
> are different.  And have VERY different meanings.
> 
> > > On Dec 12, 2016, at 9:49 AM, Kirillov, Ivan A. <ikirillov@mitre.org> 
> wrote:
> > > 
> > > Right ? it?s just the name of the operator. The semantics are the 
> same.
> > > 
> > > Regards,
> > > Ivan
> > > 
> > > On 12/12/16, 6:46 AM, "Trey Darley" <cti@lists.oasis-open.org on 
> behalf of trey@kingfisherops.com> wrote:
> > > 
> > >    On 12.12.2016 08:13:08, Eric Burger wrote:
> > >> I could be convinced. What is the distinction between:
> > >> 
> > >> ([ipv4-addr:value = '192.0.2.5'] AND [ipv4-addr:value = 
> '192.0.2.10'])
> > >> 
> > >> and
> > >> 
> > >> ([ipv4-addr:value = '192.0.2.5'] ALONGWITH [ipv4-addr:value = 
> '192.0.2.10'])
> > >> 
> > > 
> > >    Six characters.
> 
> -- 
> John-Mark
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that 
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 
> 
> 
> 
> 

-- 
John-Mark


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]