content
Syntax: --content [!]"<content_str>";
Description:
Deprecated, see pattern and context keywords. Use the content keyword to search for the content string in the packet payload. The content string must be enclosed in double quotes.
To have the FortiGate search for a packet that does not contain the specified context string, add an exclamation mark (!) before the content string.
Multiple content items can be specified in one rule. The value can contain mixed text and binary data. The binary data is generally enclosed within the pipe (|) character.
The double quote ("), pipe sign(|) and colon(:) characters must be escaped using a back slash if specified in a content string.
If the value of the content keyword is greater than the length of the value of the depth keyword, this signature will never be matched.