Chapter 15 Unified Threat Management for FortiOS 5.0 : Custom Application & IPS Signatures : Custom signature keywords : Content keywords : pattern
  
pattern
Syntax: --pattern [!]"<pattern_str>";
Description:
The FortiGate unit will search for the specified pattern. A pattern keyword normally is followed by a context keyword to define where to look for the pattern in the packet. If a context keyword is not present, the FortiGate unit looks for the pattern anywhere in the packet buffer. To have the FortiGate search for a packet that does not contain the specified URI, add an exclamation mark (!) before the URI.
Example: --pattern "/level/" --pattern "|E8 D9FF FFFF|/bin/sh" --pattern !"|20|RTSP/"