conform documentation about regex classes \w and \p to code

see https://github.com/ossec/ossec-hids/issues/199