Structure of a custom pattern file

The characteristics of a custom pattern are:

  • A context (e.g.: tcpudp:hostname, smtp:client, dcerpc:request:data, etc.), and
  • A unique ID for a given context.