next up previous contents
Next: http_client_body Up: within Previous: Format   Contents

Examples

This rule constrains the search of EFG to not go past 10 bytes past the ABC match. 

    alert tcp any any -> any any (content:"ABC"; content:"EFG"; within:10;)


Eugene Misnik 2013-05-08