Snort mailing list archives

Re: ACID: more alerts than I asked for in acid_stat_uaddr... :)


From: Andreas Hasenack <andreas () netbank com br>
Date: Mon, 25 Jun 2001 23:54:34 -0300

links-0.95 didn't work. Two things might be preventing this:
- links doesn't deal with cookies
- links didn't send a Referer tag in its request

lynx-2.8.4dev.20 worked with that page, correctly showing only one
alert. But it also didn't send a Referer tag.

Netscape-4.77 worked right as usual.

I think it's an issue with cookies, both lynx and Netscape sent cookies
back to the server (containing a PHPSESSID), but links didn't. To confirm
this, I used Konqueror and configured it to reject cookies from the
server where ACID is running. Bingo, the same problem as with links.

Em Mon, Jun 25, 2001 at 01:36:08PM -0300, Andreas Hasenack escreveu:
I'll tcpdump some traffic later on tonight.

Em Mon, Jun 25, 2001 at 10:47:29AM +0000, roman () danyliw com escreveu:
Em Mon, Jun 25, 2001 at 09:50:27AM +0000, roman () danyliw com escreveu:
If you are using lynx for a browser, mangled GET arguments are not surprising at all.

links, not lynx. I know that lynx doesn't work. Perhaps links should then
be added to the FAQ too.

Your are correct.  "Links" has now been added to the "bad" browser list in the FAQ.

More importantly though, now that there are two independant browsers that
are breaking do we know why?

Roman

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: