Chapter 15 Unified Threat Management for FortiOS 5.0 : Custom Application & IPS Signatures : Custom signature keywords : Content keywords : offset
  
offset
Syntax: --offset <offset_int>;
Description:
Use the offset keyword to look for the contents after the specified number of bytes into the payload. The specified number of bytes is an absolute value in the payload. Follow the offset keyword with the depth keyword to stop looking for a match after a specified number of bytes. If no depth is specified, the FortiGate unit continues looking for a match until the end of the payload. The offset must be between 0 and 65535.