Re: FN with http_header and pcreH followed by same http_header+distance0...

[Graham Bignell <bignell () gmail com>]

On Tue, Jul 24, 2012 at 5:35 PM, Rm Kml <rmkml () yahoo fr> wrote:
> Someone check this on snort v2.9.3(.0) please?

You should try the snort-users list for help with your understanding
of rules, it's more active than -devel.

\\//,
Lorax

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!