Snort mailing list archives

Re: [Emerging-Sigs] Current Snort 2.9.0 manual omission - PCRE modifiers


From: Will Metcalf <william.metcalf () gmail com>
Date: Thu, 28 Apr 2011 10:41:47 -0500

heh... They are there but in the file_data section.. I have actually
reported this issue before... The answer I got back was some  issue
with latex formatting...

Regards,

Will

On Thu, Apr 28, 2011 at 10:35 AM, evilghost () packetmail net
<evilghost () packetmail net> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Cross-posting to ET for information/FYI.  Direct to Joel because he can get it
to the right folks -- not sure snort-sigs is the best place for it but tossing
it there too.

The Snort 2.9.0 manual dated Sept 27, 2010 has all the PCRE modifiers explained
like /U and /D for section 3.5.23.  Sadly, the 2.9.0 manual dated March 25, 2011
is missing a large swath of these modifiers explained.

The March 25, 2011 manual is the one currently being served by Snort.org

Section 3.5.23 pretty much got truncated it looks like.  There may be other
issues as well.

For whatever reason I don't see Sept 27, 2010 here at
http://cvs.snort.org/viewcvs.cgi/snort/doc/snort_manual.pdf?r1=1.91

- --

- -evilghost
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJNuYk8AAoJENgimYXu6xOHGMAQAI/YVTaVigvKFV8l+tcTnw1g
XSzGNVDZpQAIHtNDHFPdFX8ckkDmLmUadVTEBuvz3AMmvkxQrJDDpkx0oW7sY19P
7oa4bOThUfBRDqXRYcxoaCf4V5zqmwaC6eIG1i8W93qwYdrPxwZm4K8TYqH6uJhK
apZLg5gTyjfhZr5vD5JIejp6q2GX0VFjJluvkxSweQz396RpaQB6bj+PHRxhWywb
qq6d/hNTIqQeaugD8LZgRVluAmMD1bj7exoqPaM7TlSLrVCjJX7+EPKh8Gord/gy
V0vd/oKqXU6+FN8Hk7GvGbP6o8GhuQJ38hAdYO4CH18Y2SZ28gYJbkJxv+FuRg5N
1DcMp+QP6yP3PTdd+QbRPu1tRCLToHJDYRAT+/9pm+TB8qn/OXDiHjSp9HqILKxB
XXhthODCvFfmPXl10ouDnCAw1W/unlkXURIgYKn5Lh33PL3lrfPhAyTIc4egmgbd
fzfWPGxzeyPbr3VA+dwz0Iyxzpx0YSfQfqJrLQ/3UmHkoAymoacnhH2vJ63SpBd2
vNO3R5GUb9xLbLPtyG+FiVBH1dVyYxNNl+RCkPaUJa7LhHdtocxoWXuFLkNF/hFw
6sUAK/uQOsAOqjy4uZdcUhHlO4/HNrRKHvtmbhzOivWawsP08e8ZFywL1fO80e7+
5UGPnfksWdYvNIGTMnIG
=E6DV
-----END PGP SIGNATURE-----
_______________________________________________
Emerging-sigs mailing list
Emerging-sigs () emergingthreats net
http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com
The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!


------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Current thread: