Types of patterns

There are three basic types of patterns: text, hexadecimal, and file. Pattern matching filter rules apply to incoming packets only.

Text pattern

A text filter pattern is an ASCII string that looks similar to the following:

GET /../../../../../../../../

A hexadecimal pattern looks similar to the following:

0x33c0b805e0cd16b807e0cd1650558becc7460200f05d0733ffb8c800b9fffff3abb00150
e670e47132c0e67158fec03c8075f033c033c9b002fa99cd26fb4183f90575f5c3

Note: A hexadecimal pattern is differentiated from a text pattern by the leading 0x.

A file can contain a list, one per line, of text patterns or hexadecimal patterns. Sample pattern files can be found at http://www.clamav.net.