Unusual characters in content option

[Fermin Galan Marquez <galan () dit upm es>]

Hello everyone.

I need to introduce non ASCII standar characters (but
used in lenguages like spanish or french) in content
rules, but Snort complaints about it.

I mean rules like this:

        content: "café";

So, I have to questions:

a) What characters can't be used in content rules? (in
addition to " ; and |)
b) How could I introduce these characters? (maybe escaping
them, but what ISO ASCII extension should I use?)

Thanks.

------------
Fermín Galán 
galan () dit upm es
http://www.dit.upm.es/~galan



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users