[Snort-sigs] Issue with pcre

lists at ...3397... lists at ...3397...
Mon Oct 6 17:59:23 EDT 2014


On 10/06/2014 04:40 PM, Joel Esler (jesler) wrote:
> There’s nothing wrong with what you wrote.  Works fine for me.

I know, I suspect he's on and older version of Snort.  Remember back in the day
when it'd vomit on a content match set as fast_pattern:only; with a lone PCRE
and no other content match.  I want to say that was back in what, 2010-2011?

Cheers,
Nathan




More information about the Snort-sigs mailing list