[PATCH]: Re-word uricontent's description a bit more in the manual

[<Joshua.Kinard () us-cert gov>]

Hi snort-devel,

Attached is a patch that re-word's uricontent a bit more in the manual.
Since 'uricontent:"foobar";' is a synonym for 'content:"foobar";
http_uri;', I felt this needed clarifying.

Changes:

- Adds missing double quotes that wrap uricontent's value.
- Adds a list of applicable content modifiers.
- Notes that 'uricontent' cannot be used with other 'http_*' modifiers.
- Notes to use 'http_raw_uri' with 'content' if desired to search the
unnormalized request URI field.
- Adds uricontent to the list of options applicable to 'byte_extract'.

It also appears that when the 2.9.0.3 manual was generated, the PDF
anchor links did not make it in.


Cheers,

--J

Attachment: snort-2.9.0.3-manual-uricontent.patch
Description: snort-2.9.0.3-manual-uricontent.patch

------------------------------------------------------------------------------
Forrester recently released a report on the Return on Investment (ROI) of
Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even
within 7 months.  Over 3 million businesses have gone Google with Google Apps:
an online email calendar, and document program that's accessible from your 
browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel