[Snort-users] Not a colon content match.
Scott A. McIntyre
scott at ...1050...
Fri Mar 30 12:56:26 EST 2001
> "Scott A. McIntyre" <scott at ...1050...> writes:
> > Hi,
> > I know that one should escape a ":" in content matches, but, I'm
> > currently unable to do a negation of a colon in a content match.
> negation isn't supported AFAIK. I think the |3a| approach is correct for
> representing :.
Sorry, I should have mentioned, this is using the Build 9 version of the
CVS checkout, which somewhere along the way had negation added as a
More information about the Snort-users