[Snort-users] write PCRE rule

minhtamnw minhtamnw at ...11827...
Tue Sep 18 07:23:18 EDT 2012


Please help me how to write a pcre to detect like this in snort

xxxxYOU ARE IN MINExxTERMINATED

x is any byte :

Thanks all,

-- 
*Thân,*
*Quan Minh Tâm*

*Mobile: 01284211290
**minhtamnw at ...11827...*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120918/ecc8490a/attachment.html>


More information about the Snort-users mailing list