[Snort-users] Rule creation: content keyword

mosquitooth at ...158... mosquitooth at ...158...
Sun Feb 6 13:39:39 EST 2005


Yeah, really?
All I can find concerning multiple contents in one rule is the following
statement:

Note that multiple content rules can be specified in one rule. This allows
rules to be tailored for less false positives.

I can't find any further information, can you?

Thanks so far

Peter

-- 
Lassen Sie Ihren Gedanken freien Lauf... z.B. per FreeSMS
GMX bietet bis zu 100 FreeSMS/Monat: http://www.gmx.net/de/go/mail




More information about the Snort-users mailing list