Snort mailing list archives
Re: [PATCH]: Re-word uricontent's description a bit more in the manual
From: Joel Esler <jesler () sourcefire com>
Date: Tue, 21 Dec 2010 21:45:44 -0500
Thanks Joshua, I'll get this into the system tomorrow. Joel On Dec 21, 2010, at 6:28 PM, <Joshua.Kinard () us-cert gov> wrote:
Hi snort-devel, Attached is a patch that re-word's uricontent a bit more in the manual. Since 'uricontent:"foobar";' is a synonym for 'content:"foobar"; http_uri;', I felt this needed clarifying. Changes: - Adds missing double quotes that wrap uricontent's value. - Adds a list of applicable content modifiers. - Notes that 'uricontent' cannot be used with other 'http_*' modifiers. - Notes to use 'http_raw_uri' with 'content' if desired to search the unnormalized request URI field. - Adds uricontent to the list of options applicable to 'byte_extract'. It also appears that when the 2.9.0.3 manual was generated, the PDF anchor links did not make it in. Cheers, --J <snort-2.9.0.3-manual-uricontent.patch>------------------------------------------------------------------------------ Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
------------------------------------------------------------------------------ Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
Current thread:
- [PATCH]: Re-word uricontent's description a bit more in the manual Joshua.Kinard (Dec 21)
- Re: [PATCH]: Re-word uricontent's description a bit more in the manual Joel Esler (Dec 21)
