what would be the effect?

["Onie Camara" <neil () restricted dyndns org>]

Will I miss a lot of attacks if I disable the preprocessor http_decode or
unicode?
If so, what would be those attacks?
> From my experience, it tends to produce a lot of false positives, or could
it be just my
snort.conf configuration? :-)

What about you guys, did you disable/enable it?

Comments please. I've seen a lot of people post spp_unicode but I never I
really
saw a helpful explanation.

Thank you very much.

Neil


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users