Changes between Version 64 and Version 65 of waue


Ignore:
Timestamp:
Jul 15, 2008, 5:16:09 PM (16 years ago)
Author:
waue
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • waue

    v64 v65  
    1111
    1212 * 正規表示法 Rules:
     13
    1314規則:
    1415
     
    2526 || | || 用或( or )的方式找出數個字串 ||
    2627 || ( ) || 找出『群組』字串 ||
    27 }}}
     28
    2829範例:
     30
    2931{{{
    3032找tast 或 test: t[ae]st
     
    4143找出 g 後面接 2 到 5 個 o ,然後再接一個 g 的字串:go{2,5}g
    4244}}}
    43  * Develop Tool : [http://www.waterproof.fr/products/RegExpEditor/ Regular Expression Editor]
     45
     46---------
     47
    4448 * Snort Log 範例 :
    4549> [**] [1:2189:3] BAD-TRAFFIC IP Proto 103 PIM [**] [[br]]
     
    4852> PIM TTL:1 TOS:0xC0 ID:11423 IpLen:20 DgmLen:54 [[br]]
    4953> [Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=2003-0567][Xref => http://www.securityfocus.com/bid/8211] [[br]]
     54 * 開發工具 : [http://www.waterproof.fr/products/RegExpEditor/ Regular Expression Editor]
    5055-----------
    5156