[Snort-devel] FN with http_header and pcreH followed by same http_header+distance0...

Graham Bignell bignell at ...2499...
Tue Jul 24 17:48:37 EDT 2012


On Tue, Jul 24, 2012 at 5:35 PM, Rm Kml <rmkml at ...2519...> wrote:
> Someone check this on snort v2.9.3(.0) please?

You should try the snort-users list for help with your understanding
of rules, it's more active than -devel.

\\//,
Lorax




More information about the Snort-devel mailing list