Re: Detecting telnet connections with TERM=xxx set

[Brian <bmc () snort org>]

On Mon, Nov 25, 2002 at 10:59:29AM +0000, Sven Huster wrote:
> Are multiple content options are treated separate?

Yes.

> Like I wanted to add another one, which also might want the rawbytes option.
> Do I have to specify it each time?

Yes.

> What up with the offset and depth options?

Same with those as well.

The only options that do anything besides the current content match are distance
and within, which check patterns relative from the last pattern match.

-brian


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users