[Snort-sigs] Current Snort 2.9.0 manual omission - PCRE modifiers

evilghost at ...3397... evilghost at ...3397...
Thu Apr 28 11:35:24 EDT 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Cross-posting to ET for information/FYI.  Direct to Joel because he can get it
to the right folks -- not sure snort-sigs is the best place for it but tossing
it there too.

The Snort 2.9.0 manual dated Sept 27, 2010 has all the PCRE modifiers explained
like /U and /D for section 3.5.23.  Sadly, the 2.9.0 manual dated March 25, 2011
is missing a large swath of these modifiers explained.

The March 25, 2011 manual is the one currently being served by Snort.org

Section 3.5.23 pretty much got truncated it looks like.  There may be other
issues as well.

For whatever reason I don't see Sept 27, 2010 here at
http://cvs.snort.org/viewcvs.cgi/snort/doc/snort_manual.pdf?r1=1.91

- -- 

- -evilghost
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=E6DV
-----END PGP SIGNATURE-----




More information about the Snort-sigs mailing list