Snort - the de facto standard for intrusion detection/prevention
next up previous contents
Next: nocase Up: content Previous: Example   Contents

Changing content behavior

The content keyword has a number of modifier keywords. The modifier keywords change how the previously specified content works. These modifier keywords are:

Table: Content Modifiers
Modifier Section
nocase [*]
rawbytes [*]
depth [*]
offset [*]
distance [*]
within [*]
http_client_body [*]
http_uri [*]



Steven Sturges 2007-10-04