spaces in signature content fields?

[mike hsar <anonisu () yahoo com>]

Hi list -

Can anyone tell me if spaces are significant in hex
strings in snort signatures?  For example, in
backdoor.rules in snort 1.9.0, the signature for
"BACKDOOR DeepThroat 3.1 Server Active on Network" has
a content field of "|00 23|".  Could it just as well
be written as "|0023|"?

Thanks,

mike

__________________________________________________
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users