Snort mailing list archives
FP in http_inspect oversize dir length
From: James Affeld <jamesaffeld () yahoo com>
Date: Wed, 16 Mar 2005 14:42:50 -0800 (PST)
I've been getting a lot of alerts for this one and it looks like maybe the directory delimiter is getting missed so the byte count for directory is, well, the whole payload. Got some packet caps if there is interest. __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- FP in http_inspect oversize dir length James Affeld (Mar 16)