Home page logo

snort logo Snort mailing list archives

[PATCH]: Re-word uricontent's description a bit more in the manual
From: <Joshua.Kinard () us-cert gov>
Date: Tue, 21 Dec 2010 18:28:51 -0500

Hi snort-devel,

Attached is a patch that re-word's uricontent a bit more in the manual.
Since 'uricontent:"foobar";' is a synonym for 'content:"foobar";
http_uri;', I felt this needed clarifying.


- Adds missing double quotes that wrap uricontent's value.
- Adds a list of applicable content modifiers.
- Notes that 'uricontent' cannot be used with other 'http_*' modifiers.
- Notes to use 'http_raw_uri' with 'content' if desired to search the
unnormalized request URI field.
- Adds uricontent to the list of options applicable to 'byte_extract'.

It also appears that when the manual was generated, the PDF
anchor links did not make it in.



Attachment: snort-
Description: snort-

Forrester recently released a report on the Return on Investment (ROI) of
Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even
within 7 months.  Over 3 million businesses have gone Google with Google Apps:
an online email calendar, and document program that's accessible from your 
browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew
Snort-devel mailing list
Snort-devel () lists sourceforge net

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]