Snort mailing list archives
http_decode vs unidecode preprocessors
From: "David F. Severski" <davidski () deadheaven com>
Date: Tue, 25 Sep 2001 11:27:27 -0700
Fellow Snorters, While reviewing some snort.conf files, I came across references to the unidecode preprocessor, which appears to be destined as the replacement for the http_decode preprocessor. I'm unable to find much in the way of in-depth analysis of the two, though. Is unidecode ready for primetime? Could anyone speak to situations where http_decode might be prefered over unidecode? Thanks for the assist! David
Attachment:
_bin
Description:
Current thread:
- http_decode vs unidecode preprocessors David F. Severski (Sep 25)