[Snort-sigs] Question about content

sofia insat sofia.insat at ...174...
Tue Dec 1 04:11:42 EST 2009


I want to detect the last word in the content
for exemple if I have this bytes: ....1245643577AAAA
how can I verify that it contains "AAAA" at the end without knowing the total size of bytes

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20091201/bdbb3e65/attachment.html>

More information about the Snort-sigs mailing list