[Snort-sigs] And-ing content

Chris Green cmg at ...435...
Wed Jun 12 07:33:08 EDT 2002

Opus <opus at ...216...> writes:

> Can boolean ANDs be done with the content option?  If so, what is
> the

content: "a"; content: "b"; checks for them in the same datablock.

for boolean OR, write multiple rules :)
Chris Green <cmg at ...26...>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx

More information about the Snort-sigs mailing list