Changes between Version 64 and Version 65 of waue
- Timestamp:
- Jul 15, 2008, 5:16:09 PM (17 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
waue
v64 v65 11 11 12 12 * 正規表示法 Rules: 13 13 14 規則: 14 15 … … 25 26 || | || 用或( or )的方式找出數個字串 || 26 27 || ( ) || 找出『群組』字串 || 27 }}} 28 28 29 範例: 30 29 31 {{{ 30 32 找tast 或 test: t[ae]st … … 41 43 找出 g 後面接 2 到 5 個 o ,然後再接一個 g 的字串:go{2,5}g 42 44 }}} 43 * Develop Tool : [http://www.waterproof.fr/products/RegExpEditor/ Regular Expression Editor] 45 46 --------- 47 44 48 * Snort Log 範例 : 45 49 > [**] [1:2189:3] BAD-TRAFFIC IP Proto 103 PIM [**] [[br]] … … 48 52 > PIM TTL:1 TOS:0xC0 ID:11423 IpLen:20 DgmLen:54 [[br]] 49 53 > [Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=2003-0567][Xref => http://www.securityfocus.com/bid/8211] [[br]] 54 * 開發工具 : [http://www.waterproof.fr/products/RegExpEditor/ Regular Expression Editor] 50 55 ----------- 51 56