[Emerging-Sigs] typo in sid 2008187

[Markus Lude]

On Sun, May 11, 2008 at 07:25:49AM -0400, Matt Jonkman wrote:
> Good catch, thanks Markus.
> 
> I wish Snort would tell you about this kind of thing....

Oddly older versions of snort seems to do this.

Regards,
Markus

> Markus Lude wrote:
> > Hello,
> > there's a typo in sid 2008187:
> > 
> >   content:"|0d 0a|User-Agent:";
> >                             ^
> > 
> > ":" needs to be escaped: "\:".
> > 
> > Regards,
> > Markus
> > _______________________________________________
> > Emerging-sigs mailing list
> > Emerging-sigs at emergingthreats.net
> > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>