[Snort-sigs] byte_test:5,<,65537,0,relative,string;

Martin Olsson elof at ...1288...
Fri May 30 00:40:04 EDT 2003


Do the byte_test function handle string-input with non-numeric characters?

byte_test:5,<,65537,0,relative,string;

This function read 5 bytes of string-data and compare it with 65537. What
happen if those 5 bytes contain "10\r\n1"? What will the converted numeric
value be?

/Martin





More information about the Snort-sigs mailing list