[Snort-users] Reserved characters in msg:"..."?

John Sage jsage at ...2022...
Mon Feb 16 09:59:00 EST 2004

hello world...

Are there reserved characters that *cannot* be used within the
msg:"..." construct?

Seems I remember having problems with dots in the past, but I'm not

Any general rules about what can and cannot be used?

Can escapes of some sort be used for those that are problematic?

(If relevant: snort 2.1.1-RC1 Build 18, Linux 2.4.20..)


- John
"Mad cow? You'd be mad too, if someone was trying to eat you."

More information about the Snort-users mailing list