Snort mailing list archives

Re: byte_test:5,<,65537,0,relative,string;


From: Brian <bmc () snort org>
Date: Fri, 30 May 2003 15:43:02 -0400

On Fri, May 30, 2003 at 09:06:47AM +0200, Martin Olsson wrote:

Do the byte_test function handle string-input with non-numeric characters?

byte_test:5,<,65537,0,relative,string;

This function read 5 bytes of string-data and compare it with 65537. What
happen if those 5 bytes contain "10\r\n1"? What will the converted numeric
value be?

10

-brian


-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: