From 3488cf1a938dba1f022ca1d2ad2fb8ea1f614c82 Mon Sep 17 00:00:00 2001 From: William Metcalf Date: Sat, 2 Aug 2008 15:44:16 -0500 Subject: [PATCH] fixed sig written with ? 0.0.0.0 any (msg:\"HTTP URI cap\"; flow:to_server; content:\"GET \"; depth:4; pcre:\"/^GET (?.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; depth:400; sid:1;)"); + sig = SigInit("alert tcp 192.168.0.0 any -> 0.0.0.0 any (msg:\"HTTP URI cap\"; flow:to_server; content:\"GET \"; depth:4; pcre:\"/^GET (?P.*) HTTP\\/\\d\\.\\d\\r\\n/G\"; depth:400; sid:1;)"); if (sig) { prevsig = sig; sig_list = sig;