[Snort-sigs] Max. allowed bytes to extract

Y M snort at ...3751...
Tue Mar 29 15:57:28 EDT 2016

Hello all,

While trying to use the byte_extract, I received an error message "byte_extract rule option cannot extract more than 4 bytes.". Looking at some existing signatures, some of the have 10 bytes to extract. I was not able to infer this from the documentation. Any idea what is the maximum allowed number of bytes to extract?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20160329/cbbbae24/attachment.html>

More information about the Snort-sigs mailing list