[Snort-sigs] What is the & operator in byte_test for?

Matt Kettler mkettler at ...189...
Thu Jul 29 14:34:01 EDT 2004

At 03:16 PM 7/29/2004, Joseph Gama wrote:
>I couldn't find any documentation explaining what the
>& operator in byte_test does. Does anyone know the

I'd assume it does a bit-wise AND and results in truth if the result is 
non-zero, as per C language conventions.

Basically this is useful as a bitmask test. (ie: using &,15 would result in 
checking if any of the least-significant 4 bits are set)

More information about the Snort-sigs mailing list