[Snort-users] Regular Expressions

Chris Green cmg at ...1935...
Mon Aug 12 07:44:03 EDT 2002


Martin Auer <martin.auer at ...6586...> writes:

> Hi,
>
> I'm new here and hope this question has not been here too often.
>
> Is it possible to use regular expressions with the rule option
> content?

Nope.

In 1.9, there is work on a distance and width operator that allows one
to approximate

a.{1,number}b

ab.{number} that only looks at a fixed number
-- 
Chris Green <cmg at ...1935...>
Don't use a big word where a diminutive one will suffice.




More information about the Snort-users mailing list