It seems that the number is on its own paragraph essentially, at least
as far as websec is concerned. You might want to try the regex:
^\d+$
But don't put it in general section as it might cause a false positive
for other websites, create a special section for it. Look at the samples
I provided for VIM on how to do this.
Baruch
* Luca <address@hidden> [070216 13:50]:
> Hi,
> thanks for the reply.
> I tried
> "visitata da \d+"
>
> with and without quotes and websec still report the page has been changed.
> I have also tried \d\d\d\d with the same results....
>
> Luca
>
> On 2/16/07, Baruch Even <address@hidden> wrote:
> >* Luca <address@hidden> [070216 10:43]:
> >> Hi all,
> >> first thanks for the very nice program.
> >> I have a page
> >>
> >> http://www.crema.unimi.it/Web.asp?Tipo=23&Area=5
> >>
> >> that at the bottom contains this damn
> >>
> >> Questa Pagina ? stata visitata da
> >> 2466
> >>
> >>
> >> it's just a counter. I tried adding "visitata da" in the ignorl.list
> >> in the General section and adding Ignore = General but I still get
> >> updates...Can anyone help me?
> >
> >You need something called a regular expression to cover the number as
> >well, so the string you need is: "visitata da \d+"
> >
> >The \d means number and + means at least one character or more. So it
> >covers any string which has any number after the visitata da part.
> >
> >Cheers,
> >Baruch
> >
>
>
> _______________________________________________
> WebSec-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/websec-users
Cheers,
Baruch