ROPE Language Reference - "$data"

The "$data" register refers to the data payload part of the packet being inspected. If the packet is one of the recognised protocols (currently: UDP and TCP/IP) then it refers to the payload of those protocols. For other IP protocols it is the IP payload (including the sub-protocol headers).

Example..

$ip_protocol 6 eq assert
$data isascii assert

This line checks that the packet is a TCP/IP one and that every byte in the data payload is in the "ascii" range.

See Also

$data_len, $data_start, $packet, $packet_len