Snort mailing list archives
Re: (no subject)
From: Erik Fichtner <emf () servervault com>
Date: Thu, 17 Jan 2002 10:38:34 -0500
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, Jan 17, 2002 at 10:01:16AM +0100, Patrice.Arnal () alcatel fr wrote:
BUT I have a site with a "Calendar.gif file" . What I want is uricontent "/calendar" but NOT Calendar.gif
pass tcp blah blah (flags:A+; uricontent:"/Calendar.gif") alert tcp blah blah (msg:"WEB-CGI calendar access"; ... ) - -- Erik Fichtner Security Administrator, ServerVault, Inc. 703-333-5900 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE8Ru/5Q7EzrewLMS0RAkO8AJ0Txs54uXk4h2II/ABvNuJUXix7zQCfZ5Lc 76zHMeBZPN1bUHozNG7Skkg= =gPgZ -----END PGP SIGNATURE----- _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- (no subject), (continued)
- (no subject) charley pfaff (Jan 15)
- Re: (no subject) Saad Kadhi (Jan 15)
- (no subject) noorulsadiqin azbiya (Jan 15)
- Re: (no subject) Ian Masters (Jan 16)
- Remote collection of data from a Snort sensor in stealth mode Ian Masters (Jan 16)
- Re: Remote collection of data from a Snort sensor in stealth mode Ian Masters (Jan 16)
- Re: Remote collection of data from a Snort Guillaume (Jan 16)
- Re: Remote collection of data from a Snort sensor in stealth mode Erek Adams (Jan 16)
- Re: (no subject) skadhi (Jan 16)
- (no subject) charley pfaff (Jan 15)
- (no subject) Patrice . Arnal (Jan 17)
- Re: (no subject) Erik Fichtner (Jan 17)
- (no subject) Cary Mathews (Jan 18)
- Re: (no subject) John Sage (Jan 19)
- (no subject) apiecyk (Jan 22)
- (no subject) Ron Rosson (Jan 22)
- Re: (no subject) Ron Rosson (Jan 22)
- (no subject) Dean Scott (Jan 24)
- (no subject) deepak aggarwal (Jan 30)
- Re: (no subject) Guillaume (Jan 31)
- (no subject) Edward Cole (Feb 04)
- Re: (no subject) Matt Kettler (Feb 04)