[Snort-users] Reserved characters in msg:"..."?

John Sage jsage at ...2022...
Mon Feb 16 09:59:00 EST 2004


hello world...


Are there reserved characters that *cannot* be used within the
msg:"..." construct?

Seems I remember having problems with dots in the past, but I'm not
sure.

Any general rules about what can and cannot be used?

Can escapes of some sort be used for those that are problematic?

(If relevant: snort 2.1.1-RC1 Build 18, Linux 2.4.20..)

TIA..


- John
-- 
"Mad cow? You'd be mad too, if someone was trying to eat you."




More information about the Snort-users mailing list