[Snort-sigs] byte_test:5,<,65537,0,relative,string;

From: Martin Olsson <elof(at)sentor.se>
Date: Fri May 30 2003 - 03:06:47 EDT

Do the byte_test function handle string-input with non-numeric characters?

byte_test:5,<,65537,0,relative,string;

This function read 5 bytes of string-data and compare it with 65537. What happen if those 5 bytes contain "10\r\n1"? What will the converted numeric value be?

/Martin

---

This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri May 30 04:27:56 2003