执行fwsnort.sh 发现iptables不支持两个hex-string

Question

执行fwsnort.sh 发现iptables不支持两个hex-string

[root@localhost fwsnort]# iptables -A FWSNORT_INPUT -p udp --sport 53 -m string --hex-string "|81800001000100000000|" --algo bm -m string --hex-string "|C00C00010001000000|<|0004|" --algo bm -m comment --comment "sid:254; msgNS SPOOF query response with TTL of 1 min. and no authority; classtype:bad-unknown; rev:4; FWS:1.1;" -j LOG --log-ip-options --log-prefix "[94] SID254 "
iptables v1.3.5: Unknown arg `|C00C00010001000000|<|0004|'
Try `iptables -h' or 'iptables --help' for more information.

[root@localhost fwsnort]# iptables -A FWSNORT_INPUT -p udp --sport 53 -m string --hex-string "|81800001000100000000|"  --algo bm -m comment --comment "sid:254; msgNS SPOOF query response with TTL of 1 min. and no authority; classtype:bad-unknown; rev:4; FWS:1.1;" -j LOG --log-ip-options --log-prefix "[94] SID254 "

如果只用了一个hex-string是可以的。

是否要重新编译一下内核让iptables支持多个hex-string呢 ？

有遇到这种情况的吗？