Snort mailing list archives
Re: rule parser and escaped characters
From: Chris Green <cmg () sourcefire com>
Date: Tue, 25 Feb 2003 18:14:08 -0500
"Chris Clark" <cclark () ece gatech edu> writes:
The Snort Users Manual 1.9.1 mentions some characters that must be escaped in content strings here http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.3.9 It mentions the 3 characters on the next line " : |
";:|\ are the mandatory ones. If \ preceeds a character other than this, the \ should be ignored. I will update the documentation. -- Chris Green <cmg () sourcefire com> A good pun is its own reword. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- rule parser and escaped characters Chris Clark (Feb 25)
- Re: rule parser and escaped characters Chris Green (Feb 25)
- RE: rule parser and escaped characters Chris Clark (Mar 01)
- Re: rule parser and escaped characters Brian (Mar 03)
- RE: rule parser and escaped characters Chris Clark (Mar 01)
- Re: rule parser and escaped characters Chris Green (Feb 25)