Snort mailing list archives
http_inspect ?
From: John Hally <JHally () epnet com>
Date: Thu, 28 Jul 2005 11:06:03 -0400
Hello All, Just as a sanity check I have a question. When this preprocessor is enabled, and you have a farm of IIS servers, I should expect this preprocessor to start firing alerts for Bare Byte, IIS Unicode, Double Decode, etc. Correct? Thanks!
Current thread:
- http_inspect ? John Hally (Jul 28)