[Snort-users] Not a colon content match.

Chris Green cmg at ...671...
Fri Mar 30 12:18:51 EST 2001


"Scott A. McIntyre" <scott at ...1050...> writes:

> Hi,
> 
> I know that one should escape a ":" in content matches, but, I'm
> currently unable to do a negation of a colon in a content match.

negation isn't supported AFAIK. I think the |3a| approach is correct for
representing :.
-- 
Chris Green <cmg at ...671...>
Logic, my dear Zoe, merely enables one to be wrong with authority.
                - Doctor Who, "The Wheel in Space"




More information about the Snort-users mailing list