[Snort-users] Not a colon content match.
cmg at ...671...
Fri Mar 30 12:18:51 EST 2001
"Scott A. McIntyre" <scott at ...1050...> writes:
> I know that one should escape a ":" in content matches, but, I'm
> currently unable to do a negation of a colon in a content match.
negation isn't supported AFAIK. I think the |3a| approach is correct for
Chris Green <cmg at ...671...>
Logic, my dear Zoe, merely enables one to be wrong with authority.
- Doctor Who, "The Wheel in Space"
More information about the Snort-users