[Snort-users] What can't you put in a content match?

Martin Roesch roesch at ...421...
Sat Mar 17 01:21:25 EST 2001


:;\|

That's it.

    -Marty

"Scott A. McIntyre" wrote:
> 
> I know that a ":" causes problems and should be escaped, but, other than
> that, what other characters should be \'d or otherwise expressed in hex
> or whatnot?
> 
> Scott
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users

--
Martin Roesch
roesch at ...421...
http://www.snort.org




More information about the Snort-users mailing list