From: JP (jenseike@start.no)
Date: Mon Oct 24 2005 - 05:59:12 GMT-3
I am trying to match a uri with the string hacker.exe in it, but my IE
don't show anything
I have made a custom http service signature. Entered in hacker.exe in the
RequestRegex field, but it is not mathing on anything.. I think I have all
the other parameters correct to fire an alarm on this, but it does not.
Could you please tell me first if I am doing this correct, or if I am
entering in the string correct or do I need any other caracteres in that
field. The documentation says that in this field the string must be a valid
regular expression.. I am just trying to match on that one word, so do I
then need to have any other rexexp. parameters there?. The sensor are
firering alarms on other signatures fine.
JP
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:52 GMT-3