[Snort-users] Not a colon content match.

[Scott A. McIntyre]

> "Scott A. McIntyre" <scott at ...1050...> writes:
> 
> > Hi,
> > 
> > I know that one should escape a ":" in content matches, but, I'm
> > currently unable to do a negation of a colon in a content match.
> 
> negation isn't supported AFAIK. I think the |3a| approach is correct for
> representing :.

Sorry, I should have mentioned, this is using the Build 9 version of the
CVS checkout, which somewhere along the way had negation added as a
feature...