IIS Unicode attack

["moran" <Moran () TIEMiddleEast com>]

Hello,
I installed Snort here and it works fine I think.
But one of our web servers is working in Hebrew and this means the web site
is using
Unicode so when I look at the logs of snort I See thousands of lines like:

[**] spp_http_decode: IIS Unicode attack detected [**]

Is there a way I can tell snort Ignore the Unicode attack checking to this
specific host?

Thanks,
    Moran.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users