Open
Description
For operators supporting a list of parameters (pm, within), it would be very useful to allow to choose the delimiter.
For example, there is no way to use @pm with the string "a b c".
Remark: "a|20|b|20|c" does not work, which is for me a bug.
I propose to use the first non-alphanumeric character after @pm as a separator.
Ex. using / as separator: @pm/Sharepoint Active-X Upload Control
Pipe (|) should probably be refused because of the snort syntax.
Activity
marcstern commentedon Aug 14, 2015
Any news on this?
quenenni commentedon Jul 5, 2016
I'm also interested in this feature.
How can I put:
in a pm action.
As "3. The @pm operator phrases do not support metacharacters. ", I don't see how I can do this.
I could try to use an external file and use pmf, but there is still the #1167 issue to resolve/understand.
pm
support more delimiter #2699