Snort mailing list archives

http_inspect


From: "Esler, Joel - Contractor" <joel.esler () rcert-s army mil>
Date: Thu, 29 Jul 2004 15:05:46 -0400

detect_anomalous_servers config for http_inspect.  When I turn it on, it
works, but it detects return HTTP traffic as opposed to HTTP traffic to
non $HTTP_SERVERS, I am assuming that this is the probem with it right
now and they are going to fix it?  Or do I have something misconfig?
 
J

Current thread: