+----------------+------------------------------------------------------------------------------+
| [string] <num> | |
| | - hex - Converted string represented in hex |
-| | - dec - Converted string represented in dedimal |
+| | - dec - Converted string represented in decimal |
| | - oct - Converted string represented in octal |
+----------------+------------------------------------------------------------------------------+
| [dce] | Allow the DCE module determine the byte order |
alert tcp any any -> any any \
(msg:"Byte_Test Example - Detect Large Values"; content:"|00 01 00 02|"; \
- byte_test:2,>,1000,relavtive;)
+ byte_test:2,>,1000,relative;)
alert tcp any any -> any any \
(msg:"Byte_Test Example - Lowest bit is set"; \