Re: Feature request: isdataat ability in specific (preprocessor) buffers

[L0rd Ch0de1m0rt <l0rdch0de1m0rt () gmail com>]

On Thu, Oct 24, 2013 at 8:21 AM, Joel Esler <jesler () sourcefire com> wrote:

> :)
>
> Yes. But all of that is part of something bigger.  It'll all come together.
>
> You can kinda trick http_uri/isdataat with a urilen. Not the same thing,
> but if used properly can have the same effect.
Hello.

Joel, this may have been fixed in recent versions but based on our previous
thread ("Touched by a proxy: thoughts on urilen?"), urilen isn't useful for
proxy environments --

https://lists.emergingthreats.net/pipermail/emerging-sigs/2013-February/021487.html

Cheers,

Lord C.

------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most 
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!