Snort decoder

[Ron Sal <nsamurain () gmail com>]

> my problem is that if i want to match on multiple content within the
> base64 decoded data ( done by preprocessor, file_data) its like there is
> a limit for maximum distance between the contents.
>
> 2 content with 10024 bytes between and that is not working
> but 2 content with 2016 between is working
> Is there a limit? can i read about it? is it configurable?

/Ronnie

------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!