Snort mailing list archives

Re: spaces in signature content fields?


From: Brian <bmc () snort org>
Date: Thu, 13 Feb 2003 23:06:36 -0500

On Tue, Feb 18, 2003 at 11:56:47AM -0800, mike hsar wrote:

OK.  I guess then that there is no real significance
to other signautures that don't have the spaces?  For
example in the same backdoor.rules file the content
field for "BACKDOOR subseven 22" has no spaces:
"|0d0a5b52504c5d3030320d0a|".

Correct.  Spaces in the hex portion of the content option are there just
for readability.

-brian


-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: