[Snort-sigs] What is the & operator in byte_test for?

Matt Kettler mkettler at ...189...
Thu Jul 29 14:34:01 EDT 2004


At 03:16 PM 7/29/2004, Joseph Gama wrote:
>I couldn't find any documentation explaining what the
>& operator in byte_test does. Does anyone know the
>answer?

I'd assume it does a bit-wise AND and results in truth if the result is 
non-zero, as per C language conventions.

Basically this is useful as a bitmask test. (ie: using &,15 would result in 
checking if any of the least-significant 4 bits are set)





More information about the Snort-sigs mailing list