[Snort-sigs] Re: [Snort-users] byte_test:5,<,65537,0,relative,string;

Brian bmc at ...95...
Fri May 30 12:38:06 EDT 2003


On Fri, May 30, 2003 at 09:06:47AM +0200, Martin Olsson wrote:
> 
> Do the byte_test function handle string-input with non-numeric characters?
> 
> byte_test:5,<,65537,0,relative,string;
> 
> This function read 5 bytes of string-data and compare it with 65537. What
> happen if those 5 bytes contain "10\r\n1"? What will the converted numeric
> value be?

10

-brian




More information about the Snort-sigs mailing list