[Snort-sigs] Current Snort 2.9.0 manual omission - PCRE modifiers

Joel Esler jesler at ...435...
Thu Apr 28 11:36:44 EDT 2011


Thanks Evilghost, I'll look into it.

On Thu, Apr 28, 2011 at 11:35 AM, evilghost at ...3397... <
evilghost at ...3397...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Cross-posting to ET for information/FYI.  Direct to Joel because he can get
> it
> to the right folks -- not sure snort-sigs is the best place for it but
> tossing
> it there too.
>
> The Snort 2.9.0 manual dated Sept 27, 2010 has all the PCRE modifiers
> explained
> like /U and /D for section 3.5.23.  Sadly, the 2.9.0 manual dated March 25,
> 2011
> is missing a large swath of these modifiers explained.
>
> The March 25, 2011 manual is the one currently being served by Snort.org
>
> Section 3.5.23 pretty much got truncated it looks like.  There may be other
> issues as well.
>
> For whatever reason I don't see Sept 27, 2010 here at
> http://cvs.snort.org/viewcvs.cgi/snort/doc/snort_manual.pdf?r1=1.91
>
> - --
>
> - -evilghost
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
>
> iQIcBAEBAgAGBQJNuYk8AAoJENgimYXu6xOHGMAQAI/YVTaVigvKFV8l+tcTnw1g
> XSzGNVDZpQAIHtNDHFPdFX8ckkDmLmUadVTEBuvz3AMmvkxQrJDDpkx0oW7sY19P
> 7oa4bOThUfBRDqXRYcxoaCf4V5zqmwaC6eIG1i8W93qwYdrPxwZm4K8TYqH6uJhK
> apZLg5gTyjfhZr5vD5JIejp6q2GX0VFjJluvkxSweQz396RpaQB6bj+PHRxhWywb
> qq6d/hNTIqQeaugD8LZgRVluAmMD1bj7exoqPaM7TlSLrVCjJX7+EPKh8Gord/gy
> V0vd/oKqXU6+FN8Hk7GvGbP6o8GhuQJ38hAdYO4CH18Y2SZ28gYJbkJxv+FuRg5N
> 1DcMp+QP6yP3PTdd+QbRPu1tRCLToHJDYRAT+/9pm+TB8qn/OXDiHjSp9HqILKxB
> XXhthODCvFfmPXl10ouDnCAw1W/unlkXURIgYKn5Lh33PL3lrfPhAyTIc4egmgbd
> fzfWPGxzeyPbr3VA+dwz0Iyxzpx0YSfQfqJrLQ/3UmHkoAymoacnhH2vJ63SpBd2
> vNO3R5GUb9xLbLPtyG+FiVBH1dVyYxNNl+RCkPaUJa7LhHdtocxoWXuFLkNF/hFw
> 6sUAK/uQOsAOqjy4uZdcUhHlO4/HNrRKHvtmbhzOivWawsP08e8ZFywL1fO80e7+
> 5UGPnfksWdYvNIGTMnIG
> =E6DV
> -----END PGP SIGNATURE-----
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20110428/88f63ce5/attachment.html>


More information about the Snort-sigs mailing list