[Snort-sigs] Not uricontent

Andrew Torres aatorres19 at ...2420...
Thu Feb 23 16:40:26 EST 2012


Can and advise on a method to write a rule that says all content except
uricontent. An example of this would be looking for a string in the body of
the text but not in the uri.
Please Advise. Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20120223/c29c06ba/attachment.html>


More information about the Snort-sigs mailing list