[Snort-sigs] regex

batz batsy at ...368...
Fri Feb 15 13:03:23 EST 2002

Not sure if this is for snort-users or not, but I'm not on that list, 
and this isn't in the FAQ. 

Anyway. I was wondering if the "content:" field/directive of signatures
allowed regex's. I was thinking I could cut down on false positives 
in a few signatures by having the signature be able to parse [0-9][a-z]
\? "." etc... 


More information about the Snort-sigs mailing list