A byte_extract rule option detects nothing by itself. Its use is in extracting packet data for use in other rule options. Here is a list of places where byte_extract variables can be used:
Rule Option | Arguments that Take Variables |
content/uricontent | offset, depth, distance, within |
byte_test | offset, value |
byte_jump | offset |
isdataat | offset |