For Network IPS appliances, use the keyword content to set rules that search for specific content in the packet payload.
When the content is detected, the event responds based on the data provided.
The option data for the content keyword can contain both text and binary data. The binary data is enclosed within the pipe ( | ) character and represented as bytecode. Bytecode represents binary data as hexadecimal numbers and is a good shorthand method for describing complex binary data.