| Pablo Neira | 014a48f | 2006-01-03 11:50:16 +0000 | [diff] [blame] | 1 | This modules matches a given string by using some pattern matching strategy. It requires a linux kernel >= 2.6.14. |
| 2 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 3 | \fB\-\-algo\fP {\fBbm\fP|\fBkmp\fP} |
| Pablo Neira | 014a48f | 2006-01-03 11:50:16 +0000 | [diff] [blame] | 4 | Select the pattern matching strategy. (bm = Boyer-Moore, kmp = Knuth-Pratt-Morris) |
| 5 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 6 | \fB\-\-from\fP \fIoffset\fP |
| Pablo Neira | 014a48f | 2006-01-03 11:50:16 +0000 | [diff] [blame] | 7 | Set the offset from which it starts looking for any matching. If not passed, default is 0. |
| 8 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 9 | \fB\-\-to\fP \fIoffset\fP |
| Jan Engelhardt | 2b253f4 | 2010-06-04 12:51:24 +0200 | [diff] [blame] | 10 | Set the offset up to which should be scanned. That is, byte \fIoffset\fP-1 |
| 11 | (counting from 0) is the last one that is scanned. |
| 12 | If not passed, default is the packet size. |
| Pablo Neira | 014a48f | 2006-01-03 11:50:16 +0000 | [diff] [blame] | 13 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 14 | [\fB!\fP] \fB\-\-string\fP \fIpattern\fP |
| Pablo Neira | 014a48f | 2006-01-03 11:50:16 +0000 | [diff] [blame] | 15 | Matches the given pattern. |
| Jan Engelhardt | 9b488b9 | 2008-06-08 19:11:51 +0200 | [diff] [blame] | 16 | .TP |
| Jan Engelhardt | fea74bf | 2009-01-12 04:53:18 +0100 | [diff] [blame] | 17 | [\fB!\fP] \fB\-\-hex\-string\fP \fIpattern\fP |
| Pablo Neira | 014a48f | 2006-01-03 11:50:16 +0000 | [diff] [blame] | 18 | Matches the given pattern in hex notation. |