[Snort-users] What can't you put in a content match?

Fyodor fygrave at ...121...
Thu Mar 15 15:03:04 EST 2001


On Thu, Mar 15, 2001 at 01:53:28PM +0100, Scott A. McIntyre wrote:
> I know that a ":" causes problems and should be escaped, but, other than
> that, what other characters should be \'d or otherwise expressed in hex
> or whatnot?
> 
> 

\, |, ", probably others :)

-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1




More information about the Snort-users mailing list