No subject


Thu Nov 23 16:36:19 EST 2017


Also note that the following characters must be escaped inside a content
rule:  " : |

I.e. you need to escape your : so it becomes
content:"<classid=3D\"clsid\:\""; and it shouldn't segfault.

Regards,
Andreas =D6stling





More information about the Snort-users mailing list