IDS mailing list archives
x-forwarded-for an IDS capability
From: James <jimbob.coffey () gmail com>
Date: Wed, 29 Apr 2009 14:27:55 +1000
Hi List, Does anyone know of an IDS vendor/or opensource product that has the capability of associating an ip address in an x-forwarded-for http header with an IDS event ? This includes events that fire on a download as well so there would need to be some kind of internal http state management. I notice this request from Jason Haars back in 2004 to the snort mailing list but I can't seem to find anything else on this in google http://archives.neohapsis.com/archives/snort/2004-06/0235.html thanks -- jac
Current thread:
- x-forwarded-for an IDS capability James (Apr 29)
- RE: x-forwarded-for an IDS capability Hellman, Matthew (Apr 29)
- Message not available
- RE: x-forwarded-for an IDS capability Hellman, Matthew (Apr 30)
- Re: x-forwarded-for an IDS capability Arian J. Evans (Apr 30)
- Message not available
- Message not available
- Fwd: x-forwarded-for an IDS capability Arian J. Evans (Apr 30)
- RE: x-forwarded-for an IDS capability Hellman, Matthew (Apr 29)