Snort mailing list archives
spaces causing problems in content filters in win32 port of snort
From: "Tom H" <tom () scriptsupport co uk>
Date: Mon, 14 Jul 2003 21:54:35 +0100
Hi, when a content filter contains a space ' ' or a '.' character, snort does not seem to be matching the text correctly. at the moment it will match single words like 'freexxx', but will not match 'free xxx' or words seperated by dots 'alt.binarires.whatever', commenting out the dots '\.' seems to work for dots, but not for spaces. and this also has the pain of breaking a lot of the rules supplies along with snort. any ideas on whether I can fix this without changing lots of rules. Cheers Tom H ------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps1 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- spaces causing problems in content filters in win32 port of snort Tom H (Jul 14)