Snort mailing list archives
Re: [Emerging-Sigs] Current Snort 2.9.0 manual omission - PCRE modifiers
From: Will Metcalf <william.metcalf () gmail com>
Date: Thu, 28 Apr 2011 10:41:47 -0500
heh... They are there but in the file_data section.. I have actually reported this issue before... The answer I got back was some issue with latex formatting... Regards, Will On Thu, Apr 28, 2011 at 10:35 AM, evilghost () packetmail net <evilghost () packetmail net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cross-posting to ET for information/FYI. Direct to Joel because he can get it to the right folks -- not sure snort-sigs is the best place for it but tossing it there too. The Snort 2.9.0 manual dated Sept 27, 2010 has all the PCRE modifiers explained like /U and /D for section 3.5.23. Sadly, the 2.9.0 manual dated March 25, 2011 is missing a large swath of these modifiers explained. The March 25, 2011 manual is the one currently being served by Snort.org Section 3.5.23 pretty much got truncated it looks like. There may be other issues as well. For whatever reason I don't see Sept 27, 2010 here at http://cvs.snort.org/viewcvs.cgi/snort/doc/snort_manual.pdf?r1=1.91 - -- - -evilghost -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJNuYk8AAoJENgimYXu6xOHGMAQAI/YVTaVigvKFV8l+tcTnw1g XSzGNVDZpQAIHtNDHFPdFX8ckkDmLmUadVTEBuvz3AMmvkxQrJDDpkx0oW7sY19P 7oa4bOThUfBRDqXRYcxoaCf4V5zqmwaC6eIG1i8W93qwYdrPxwZm4K8TYqH6uJhK apZLg5gTyjfhZr5vD5JIejp6q2GX0VFjJluvkxSweQz396RpaQB6bj+PHRxhWywb qq6d/hNTIqQeaugD8LZgRVluAmMD1bj7exoqPaM7TlSLrVCjJX7+EPKh8Gord/gy V0vd/oKqXU6+FN8Hk7GvGbP6o8GhuQJ38hAdYO4CH18Y2SZ28gYJbkJxv+FuRg5N 1DcMp+QP6yP3PTdd+QbRPu1tRCLToHJDYRAT+/9pm+TB8qn/OXDiHjSp9HqILKxB XXhthODCvFfmPXl10ouDnCAw1W/unlkXURIgYKn5Lh33PL3lrfPhAyTIc4egmgbd fzfWPGxzeyPbr3VA+dwz0Iyxzpx0YSfQfqJrLQ/3UmHkoAymoacnhH2vJ63SpBd2 vNO3R5GUb9xLbLPtyG+FiVBH1dVyYxNNl+RCkPaUJa7LhHdtocxoWXuFLkNF/hFw 6sUAK/uQOsAOqjy4uZdcUhHlO4/HNrRKHvtmbhzOivWawsP08e8ZFywL1fO80e7+ 5UGPnfksWdYvNIGTMnIG =E6DV -----END PGP SIGNATURE----- _______________________________________________ Emerging-sigs mailing list Emerging-sigs () emergingthreats net http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreatspro.com The ONLY place to get complete premium rulesets for Snort 2.4.0 through Current!
------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org
Current thread:
- Current Snort 2.9.0 manual omission - PCRE modifiers evilghost () packetmail net (Apr 28)
- Re: Current Snort 2.9.0 manual omission - PCRE modifiers Joel Esler (Apr 28)
- Re: [Emerging-Sigs] Current Snort 2.9.0 manual omission - PCRE modifiers Will Metcalf (Apr 28)