[Snort-users] how to create testing data files??

Joel Esler jesler at ...1935...
Sat Aug 14 19:56:05 EDT 2010

On Aug 14, 2010, at 7:44 PM, waldo kitty <wkitty42 at ...14940...> wrote:

> concerning if within 
> takes into account the distance or not...

> also, there's a question in the above of if the within content must /all/ reside 
> within or if it must only /start/ within...

It must be wholly within the "within" space. 

More information about the Snort-users mailing list