Snort mailing list archives
Re: ACID: more alerts than I asked for in acid_stat_uaddr... :)
From: Andreas Hasenack <andreas () netbank com br>
Date: Mon, 25 Jun 2001 23:54:34 -0300
links-0.95 didn't work. Two things might be preventing this: - links doesn't deal with cookies - links didn't send a Referer tag in its request lynx-2.8.4dev.20 worked with that page, correctly showing only one alert. But it also didn't send a Referer tag. Netscape-4.77 worked right as usual. I think it's an issue with cookies, both lynx and Netscape sent cookies back to the server (containing a PHPSESSID), but links didn't. To confirm this, I used Konqueror and configured it to reject cookies from the server where ACID is running. Bingo, the same problem as with links. Em Mon, Jun 25, 2001 at 01:36:08PM -0300, Andreas Hasenack escreveu:
I'll tcpdump some traffic later on tonight. Em Mon, Jun 25, 2001 at 10:47:29AM +0000, roman () danyliw com escreveu:Em Mon, Jun 25, 2001 at 09:50:27AM +0000, roman () danyliw com escreveu:If you are using lynx for a browser, mangled GET arguments are not surprising at all.links, not lynx. I know that lynx doesn't work. Perhaps links should then be added to the FAQ too.Your are correct. "Links" has now been added to the "bad" browser list in the FAQ. More importantly though, now that there are two independant browsers that are breaking do we know why? Roman
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ACID: more alerts than I asked for in acid_stat_uaddr... :) Andreas Hasenack (Jun 19)
- <Possible follow-ups>
- Re: ACID: more alerts than I asked for in acid_stat_uaddr... :) roman (Jun 20)
- Re: ACID: more alerts than I asked for in acid_stat_uaddr... :) Andreas Hasenack (Jun 24)
- Re: ACID: more alerts than I asked for in acid_stat_uaddr... :) roman (Jun 25)
- Re: ACID: more alerts than I asked for in acid_stat_uaddr... :) Andreas Hasenack (Jun 25)
- Re: ACID: more alerts than I asked for in acid_stat_uaddr... :) roman (Jun 25)
- Re: ACID: more alerts than I asked for in acid_stat_uaddr... :) Andreas Hasenack (Jun 25)