Re: About HTTP INSPECT

["Al Lewis (allewi)" <allewi () cisco com>]

Hello,

                Check out section “3.5.26 pcre” in the manual here -- > 
http://manual.snort.org/node32.html#pcre-mod_perl

There is a table that lists the options available.

Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi () cisco com

From: 강명훈 [mailto:mhkang589 () gmail com]
Sent: Sunday, June 07, 2015 9:31 AM
To: snort-users
Subject: [Snort-users] About HTTP INSPECT

Hi. all.:)
Does HTTP INSPECT support content only?
Not support pcre?
Thanks.

--
[Image removed by sender.]
kangmyounghun.blogspot.kr<http://kangmyounghun.blogspot.kr/>
kr.linkedin.com/pub/myounghun-kang/74/238/93a<http://kr.linkedin.com/pub/myounghun-kang/74/238/93a>

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!