RE: Where to configure/change rules for this one?

["Ed Greshko" <Edward.M.Greshko () syntegra com>]

Neil (and Dr SuSE),

>   preprocessor http_decode: 80 8080 -unicode

Thanks....  I'll be having my eyes examined in the morning....

I do wonder, however, if the code could be modified to be more tolerant to
avoid false positives.

Ed


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users