Re: rule parser and escaped characters

[Chris Green <cmg () sourcefire com>]

"Chris Clark" <cclark () ece gatech edu> writes:

> The Snort Users Manual 1.9.1 mentions some characters that must be
> escaped in content strings here
> http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.3.9
>
> It mentions the 3 characters on the next line
>  " : |

";:|\ are the mandatory ones.  If \ preceeds a character other than
this, the \ should be ignored.  I will update the documentation. 
-- 
Chris Green <cmg () sourcefire com>
A good pun is its own reword.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users