[Snort-users] byte_test:5,<,65537,0,relative,string;

Martin Olsson elof at ...6680...
Fri May 30 00:40:08 EDT 2003


Do the byte_test function handle string-input with non-numeric characters?

byte_test:5,<,65537,0,relative,string;

This function read 5 bytes of string-data and compare it with 65537. What
happen if those 5 bytes contain "10\r\n1"? What will the converted numeric
value be?

/Martin





More information about the Snort-users mailing list