[Snort-users] spaces causing problems in content filters in win32 port of snort

Tom H tom at ...9643...
Mon Jul 14 13:57:03 EDT 2003


Hi,

when a content filter contains a space ' ' or a '.' character, snort does not seem to be matching the text correctly. at the moment it will match single words like 'freexxx', but will not match 'free xxx' or words seperated by dots 'alt.binarires.whatever', commenting out the dots '\.' seems to work for dots, but not for spaces. and this also has the pain of breaking a lot of the rules supplies along with snort.

any ideas on whether I can fix this without changing lots of rules.

Cheers

Tom H





More information about the Snort-users mailing list