[Snort-users] Which is the escape character in content option?

Fermin Galan Marquez galan at ...3803...
Sun Oct 21 08:39:01 EDT 2001


Hello everyone.

Characters ", | and ; must be escaped inside a content
option (as it's told on User Manual section 2.3.9), but
which is this escape character?

For example, how the following rule should be written?

	content: "Location| http; web";

Thanks.

--------
Fermin Galan
galan at ...3803...
http://www.dit.upm.es/~galan






More information about the Snort-users mailing list