Snort mailing list archives

Re: Which is the escape character in content option?


From: roman () danyliw com
Date: Sun, 21 Oct 2001 13:32:27 US/Eastern

* Escape via hex encoding

content: "Location | 7c | http | 3b | web";

* Escape via backspace   

content: "Location\| http\; web";

cheers,
Roman

On Sun, 21 Oct 2001, Fermin Galan Marquez wrote:
 

Hello everyone.

Characters ", | and ; must be escaped inside a content 
option (as it's told on User Manual section 2.3.9), but
which is this escape character?

For example, how the following rule should be written?

      content: "Location| http; web";

Thanks.

--------
Fermin Galan
galan () dit upm es

http://www.dit.upm.es/~galan


---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: