[Snort-sigs] [Emerging-Sigs] Errors with the Snort manual

evilghost at ...3397... evilghost at ...3397...
Thu Feb 18 16:09:58 EST 2010


Yeah I agree, I just thought it was a poor example regarding convention 
and continuity with the rest of the manual; just like I can "rev: 1;" or 
"rev:1;" but the accepted/preferred convention is no-space.

-evilghost

Joel Esler wrote:
> On Thu, Feb 18, 2010 at 3:43 PM, evilghost at ...3397... 
> <mailto:evilghost at ...3397...> <evilghost at ...3397... 
> <mailto:evilghost at ...3397...>> wrote:
>
>
>        Page #117, hex content match, that's some insane spacing/format
>     there.
>
>
> BTW -- you *can* do this.  Either way works.  The important part is 
> that the hex is in between | |.
>
> J 
>
>
>
> -- 
> Joel Esler
> 302-223-5974




More information about the Snort-sigs mailing list