Snort mailing list archives

Re: (no subject)

From: Dragos Ruiu <dr () kyx net>
Date: Mon, 9 Jul 2001 22:55:14 -0700

On Mon, 09 Jul 2001, Blake Frantz wrote:

The IIS Unicode attack (from my experience) is probably a false positive.
Check the packet payload and your web logs for directory traversal
attempts.


FAQ 4.17.

--dr

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

(no subject) Андрей Иванов (Jul 02)
- <Possible follow-ups>
- (no subject) cboy (Jul 09)
  - Re: (no subject) Blake Frantz (Jul 09)
    - Re: (no subject) Dragos Ruiu (Jul 09)
- (no subject) John Johnson (Jul 10)
  - RE: (no subject) Bill Gercken (Jul 11)
  - Re: (no subject) Phil Wood (Jul 11)
- (no subject) Randall Paige (Jul 12)
- (no subject) Blake Frantz (Jul 31)
  - Re: (no subject) Niek Jongerius (Aug 01)
- (no subject) Anupam Bansal (Aug 03)
  - Re: (no subject) Dragos Ruiu (Aug 03)
- (no subject) Patrick W Bass (Aug 03)
- (no subject) Scott Phelps (Aug 07)

(Thread continues...)