[Snort-sigs] Bug in matching engine ?

Chris Green cmg at ...435...
Tue Nov 4 07:24:11 EST 2003


Cedric Foll <cedric.foll at ...1947...> writes:

> Hi there,
> Does the problem can be that the engine try to get the 2 lasts
> "content" just after having found the first "Content-Type|3a|" (and
> never reach the second Content-Type|3a|).
> If I remove the "distance:0; within:128;" it works.


This is fixed with Snort 2.0.3 that should be available within
the next 2 hours.
-- 
Chris Green <cmg at ...435...>
To err is human, to moo bovine.




More information about the Snort-sigs mailing list