[Snort-sigs] PCRE /PR modifiers

lists at ...3397... lists at ...3397...
Tue Jul 7 14:02:37 EDT 2015


On 07/07/15 12:56, Y M wrote:
> content:"ABC|3A|"; http_client_body; pcre:"/(doA|doB|doC)/PR"; and this is where
> I got the error.

pcre:"/do[ABC]/R" maybe?




More information about the Snort-sigs mailing list