Key Pages: [ Rope Home Page | Basics (tutorial) | Language Reference | Download ]
The "$data" register refers to the data payload part of the packet being inspected. If the packet is one of the recognised protocols (currently: UDP and TCP/IP) then it refers to the payload of those protocols. For other IP protocols it is the IP payload (including the sub-protocol headers).
Example..
$ip_protocol 6 eq assert $data isascii assert
This line checks that the packet is a TCP/IP one and that every byte in the data payload is in the "ascii" range.
$data_len, $data_start, $packet, $packet_len
Lowth.com: [ Home | Rope | P2PWall | LinWiz | cutter | Protector - Free Antivirus software | TapeIO ]