[Snort-sigs] Issue with pcre

lists at ...3397... lists at ...3397...
Mon Oct 6 17:31:02 EDT 2014


On 10/06/2014 04:27 PM, Joel Esler (jesler) wrote:
> “only” on a fast_pattern is case insensitive.  you don’t need the nocase.

He had to remove the 'only', Snort was vomiting on fast_pattern:only on a
singular content match with a PCRE -- see my earlier quoted reply.  Thanks

Cheers,
Nathan




More information about the Snort-sigs mailing list