[Snort-users] byte_jump

mosquitooth at ...158... mosquitooth at ...158...
Sun Feb 20 09:31:28 EST 2005


Hi,

just one simple question concerning the byte_jump keyword:

I'm not quite sure about the use of the multiplier statement, so would this
be correct?

byte_jump: 2,4,big,multiplier 34;

Is the string 'multiplier' necessary? I've not found any rule deployed with
snort that does use this multiplier...


Greetings,

Peter


-- 
DSL Komplett von GMX +++ Supergünstig und stressfrei einsteigen!
AKTION "Kein Einrichtungspreis" nutzen: http://www.gmx.net/de/go/dsl




More information about the Snort-users mailing list