Snort-1.9.0 not generating required alerts

[archana rao <archuatdavis () yahoo com>]

Hi,
   I had been using Snort-1.8.7 to detect the attacks
towards an IIS 4.0 server which uses the URI:
GET /scripts/..%c0%af../winnt/system32/cmd.exe/c+"

and alerts were being generated by Snort-1.8.7.  
However, when I used Snort-1.9.0 to detect the same
attacks, no alerts were being generated although I    
 see from the source code that several improvements to
deal with attacks against IIS servers more efficiently
 have been made which should enable Snort-1.9.0 to
generate more alerts.I am not able to figure out what
the problem is.Any suggestions?
Thanks in advance,
Archana

__________________________________________________
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos & More
http://faith.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users