[Snort-sigs] [Emerging-Sigs] Current Snort 2.9.0 manual omission - PCRE modifiers

Will Metcalf william.metcalf at ...2420...
Thu Apr 28 11:41:47 EDT 2011


heh... They are there but in the file_data section.. I have actually
reported this issue before... The answer I got back was some  issue
with latex formatting...

Regards,

Will

On Thu, Apr 28, 2011 at 10:35 AM, evilghost at ...3397...
<evilghost at ...3397...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Cross-posting to ET for information/FYI.  Direct to Joel because he can get it
> to the right folks -- not sure snort-sigs is the best place for it but tossing
> it there too.
>
> The Snort 2.9.0 manual dated Sept 27, 2010 has all the PCRE modifiers explained
> like /U and /D for section 3.5.23.  Sadly, the 2.9.0 manual dated March 25, 2011
> is missing a large swath of these modifiers explained.
>
> The March 25, 2011 manual is the one currently being served by Snort.org
>
> Section 3.5.23 pretty much got truncated it looks like.  There may be other
> issues as well.
>
> For whatever reason I don't see Sept 27, 2010 here at
> http://cvs.snort.org/viewcvs.cgi/snort/doc/snort_manual.pdf?r1=1.91
>
> - --
>
> - -evilghost
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
>
> iQIcBAEBAgAGBQJNuYk8AAoJENgimYXu6xOHGMAQAI/YVTaVigvKFV8l+tcTnw1g
> XSzGNVDZpQAIHtNDHFPdFX8ckkDmLmUadVTEBuvz3AMmvkxQrJDDpkx0oW7sY19P
> 7oa4bOThUfBRDqXRYcxoaCf4V5zqmwaC6eIG1i8W93qwYdrPxwZm4K8TYqH6uJhK
> apZLg5gTyjfhZr5vD5JIejp6q2GX0VFjJluvkxSweQz396RpaQB6bj+PHRxhWywb
> qq6d/hNTIqQeaugD8LZgRVluAmMD1bj7exoqPaM7TlSLrVCjJX7+EPKh8Gord/gy
> V0vd/oKqXU6+FN8Hk7GvGbP6o8GhuQJ38hAdYO4CH18Y2SZ28gYJbkJxv+FuRg5N
> 1DcMp+QP6yP3PTdd+QbRPu1tRCLToHJDYRAT+/9pm+TB8qn/OXDiHjSp9HqILKxB
> XXhthODCvFfmPXl10ouDnCAw1W/unlkXURIgYKn5Lh33PL3lrfPhAyTIc4egmgbd
> fzfWPGxzeyPbr3VA+dwz0Iyxzpx0YSfQfqJrLQ/3UmHkoAymoacnhH2vJ63SpBd2
> vNO3R5GUb9xLbLPtyG+FiVBH1dVyYxNNl+RCkPaUJa7LhHdtocxoWXuFLkNF/hFw
> 6sUAK/uQOsAOqjy4uZdcUhHlO4/HNrRKHvtmbhzOivWawsP08e8ZFywL1fO80e7+
> 5UGPnfksWdYvNIGTMnIG
> =E6DV
> -----END PGP SIGNATURE-----
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at ...3335...
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com
> The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!
>




More information about the Snort-sigs mailing list