Snort mailing list archives
Re: base64 for http_inspect
From: Bhagya Bantwal <bbantwal () sourcefire com>
Date: Mon, 2 Aug 2010 13:10:41 -0400
Yes they are Snort 2.9.0 options. -B On Mon, Aug 2, 2010 at 12:13 PM, Paul Dokas <dokas () oitsec umn edu> wrote:
Are base64_decode and base64_data Snort 2.9.0 options? I don't see them anywhere in the 2.8.6 source, the manual that's in the distribution or the manual available online via www.snort.org. Paul On 08/02/10 09:21, Bhagya Bantwal wrote:Base64 decoding for HTTP is implemented using the rule options base64_decode and base64_data (Please refer to the snort manual for more information). We will update the README.http_inspect and remove the following obsolete documentation. -B-- Paul Dokas dokas at oitsec.umn.edu ====================================================================== Don Juan Matus: "an enigma wrapped in mystery wrapped in a tortilla." ------------------------------------------------------------------------------ The Palm PDK Hot Apps Program offers developers who use the Plug-In Development Kit to bring their C/C++ apps to Palm for a share of $1 Million in cash or HP Products. Visit us here for more details: http://p.sf.net/sfu/dev2dev-palm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ The Palm PDK Hot Apps Program offers developers who use the Plug-In Development Kit to bring their C/C++ apps to Palm for a share of $1 Million in cash or HP Products. Visit us here for more details: http://p.sf.net/sfu/dev2dev-palm
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- base64 for http_inspect Paul Schmehl (Jul 30)
- Re: base64 for http_inspect Joel Esler (Jul 30)
- Re: base64 for http_inspect Bhagya Bantwal (Aug 02)
- Re: base64 for http_inspect Paul Dokas (Aug 02)
- Re: base64 for http_inspect Bhagya Bantwal (Aug 02)
- Re: base64 for http_inspect Paul Dokas (Aug 02)