[Snort-users] Which is the escape character in content option?

Fermin Galan Marquez galan at ...3803...
Sun Oct 21 08:39:01 EDT 2001

Hello everyone.

Characters ", | and ; must be escaped inside a content
option (as it's told on User Manual section 2.3.9), but
which is this escape character?

For example, how the following rule should be written?

	content: "Location| http; web";


Fermin Galan
galan at ...3803...

More information about the Snort-users mailing list