whe i enable the payload inspection for a custom sig, and i have more than code to check, how it will be in the field?
like if i have only one code like 0x45d
and if i have tow or more codes 0x33a and 0x23c and 0x10d
Thanks in advanced
The regex would be
Let me know, if that works for you.
In fact any format will not give an error, but i do not have the toos/software to test with real traffic.