Payload options

You can use these options to detect contents in the payload of a packet or stream. IPS signatures use pattern matching for inspecting a packet payload. A pattern definition starts with a --pattern or a --pcre option name, and is followed by a series of modifiers.

The general format of a pattern definition is:

--pattern <string>; [--context c;] [--no_case;] [--distance n[,<refer>]]; [--within n[,<refer>]];

Or, for PCRE patterns:

--pcre <string>; [--context c;] [--distance n[,<refer>]]; [--within n [,<refer>]];