Snort mailing list archives
Re: Issue with pcre
From: waldo kitty <wkitty42 () windstream net>
Date: Mon, 06 Oct 2014 22:10:28 -0400
On 10/6/2014 7:35 PM, lists () packetmail net wrote:
On 10/06/2014 06:29 PM, waldo kitty wrote:something else to consider is if you really need a pcre with that rule... the content match looks pretty definite... speaking of that, your pcre, both, do not include the trailing '/'...Yeah they do, PCRE from my reply minus the /U URI buffer Snort-centric PCRE modifier:
yerk! my bad... i see it now... i got lost with the $ on the end... -- NOTE: No off-list assistance is given without prior approval. Please *keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Issue with pcre Sean Cavanaugh (Oct 06)
- Re: Issue with pcre lists (Oct 06)
- Re: Issue with pcre Sean Cavanaugh (Oct 06)
- Re: Issue with pcre lists (Oct 06)
- Re: Issue with pcre Joel Esler (jesler) (Oct 06)
- Re: Issue with pcre lists (Oct 06)
- Re: Issue with pcre Joel Esler (jesler) (Oct 06)
- Re: Issue with pcre lists (Oct 06)
- Re: Issue with pcre Sean Cavanaugh (Oct 06)
- Re: Issue with pcre lists (Oct 06)
- Re: Issue with pcre waldo kitty (Oct 06)
- Re: Issue with pcre lists (Oct 06)
- Re: Issue with pcre waldo kitty (Oct 06)
- Re: Issue with pcre lists (Oct 06)