Snort mailing list archives
spaces in signature content fields?
From: mike hsar <anonisu () yahoo com>
Date: Tue, 18 Feb 2003 11:33:52 -0800 (PST)
Hi list - Can anyone tell me if spaces are significant in hex strings in snort signatures? For example, in backdoor.rules in snort 1.9.0, the signature for "BACKDOOR DeepThroat 3.1 Server Active on Network" has a content field of "|00 23|". Could it just as well be written as "|0023|"? Thanks, mike __________________________________________________ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- spaces in signature content fields? mike hsar (Feb 18)
- Re: spaces in signature content fields? Erek Adams (Feb 18)
- Re: spaces in signature content fields? mike hsar (Feb 18)
- Re: spaces in signature content fields? Erek Adams (Feb 18)
- Re: spaces in signature content fields? Brian (Feb 20)
- Re: spaces in signature content fields? mike hsar (Feb 18)
- Re: spaces in signature content fields? Erek Adams (Feb 18)