<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#3333ff"><FONT COLOR=BLACK>
Speedy gonzales CIO<br>
<br>
sekure wrote:
<blockquote
 cite="mid1639ada00509300709m45e03e5bpd4cf71553a5b5a5f@...11828..."
 type="cite">
  <pre wrap="">That was what I tried after i fired off the email and it worked.

Thanks!

On 9/30/05, Joel Esler <a class="moz-txt-link-rfc2396E" href="mailto:joel.esler@...1935..."><joel.esler@...1935...></a> wrote:
  </pre>
  <blockquote type="cite">
    <pre wrap="">you may not need to escape it anymore.  remove the "\"

J
On Sep 30, 2005, at 9:31 AM, sekure wrote:

    </pre>
    <blockquote type="cite">
      <pre wrap="">I have a rule in my local.rules that i picked up somewhere on the
mailing lists:

alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"IE suspicious
access to WSH (Windows Script Host)"; flow: from_server,established;
content:"object"; nocase; content:"id"; nocase; content:"wsh"; nocase;
content:"classid"; nocase; content:"clsid\:"; nocase;
content:"F935DC22-1CF0-11D0-ADB9-00C04FD58A0B"; nocase; content:"\/";
nocase; content:"object"; nocase; reference: url,
http.www.geek.com/news/geeknews/2004Jun/gee20040610025522.htm;
classtype:misc-attack; sid:1000042; rev:1;)

I just upgraded from 2.4.0 to 2.4.2 and upon launching snort i get:
"bad escape sequence starting with "\/". Fatal Error, Quitting.."
This used to work with 2.4.0 and before.  What changed?

Thanks,


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads,
discussions,
and more. <a class="moz-txt-link-freetext" href="http://solutions.newsforge.com/ibmarch.tmpl">http://solutions.newsforge.com/ibmarch.tmpl</a>
_______________________________________________
Snort-sigs mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Snort-sigs@...635...eforge.net">Snort-sigs@lists.sourceforge.net</a>
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/snort-sigs">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a>


      </pre>
    </blockquote>
    <pre wrap="">
    </pre>
  </blockquote>
  <pre wrap=""><!---->

-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. <a class="moz-txt-link-freetext" href="http://solutions.newsforge.com/ibmarch.tmpl">http://solutions.newsforge.com/ibmarch.tmpl</a>
_______________________________________________
Snort-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Snort-users@...4626...ceforge.net">Snort-users@lists.sourceforge.net</a>
Go to this URL to change user options or unsubscribe:
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/snort-users">https://lists.sourceforge.net/lists/listinfo/snort-users</a>
Snort-users list archive:
<a class="moz-txt-link-freetext" href="http://www.geocrawler.com/redir-sf.php3?list=ort-users">http://www.geocrawler.com/redir-sf.php3?list=ort-users</a>
  </pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">-- 
Ali Eghtessadi
Chief Information Officer
Babcock & Brown
Phone : 415-267-1626
Email : <a class="moz-txt-link-abbreviated" href="mailto:ali@...3823...">ali@...3823...</a>

</pre>
<BR><BR><DIV class=MsoNormal style="MARGIN: 0in 0in 0pt; TEXT-ALIGN: center" align=center><SPAN style="FONT-SIZE: 12pt"><HR align=center width="100%" SIZE=2></SPAN></DIV><P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 7.5pt"><FONT size=1>This email message may contain information that is confidential and proprietary to Babcock & Brown or a third party. If you are not the intended recipient, please contact the sender and destroy the original and any copies of the original message. Babcock & Brown takes measures to protect the content of its communications. However, Babcock & Brown cannot guarantee that email messages will not be intercepted by third parties or that email messages will be free of errors or viruses.        </FONT></SPAN></P><P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 7.5pt"><FONT size=1></FONT></SPAN> </P><P class=MsoNormal style="MARGIN: 0in 0in 0pt"><SPAN style="FONT-SIZE: 7.5pt"><FONT size=1>If you do not wish to receive any further e-mail from Babcock & Brown, please send an email to <A href="mailto:opt-out@...13546.....">opt-out@...3823...</A>.<O:P></O:P></FONT></SPAN></P></body>
</html>