Snort mailing list archives

http inspect editing

From: "David Naylor" <DNaylor () TEXASTRUSTCU ORG>
Date: Thu, 24 Feb 2005 14:51:10 -0600

Hello,

   Does anyone know how to edit unclassified rules?  For example, I would like to edit or delete the rule for "double 
decoding attack" - http_inspect

thanks,

David Naylor
IT Security Coordinator
Texas Trust



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

RE: http inspect editing Chris Vaughan (Feb 24)
- <Possible follow-ups>
- http inspect editing David Naylor (Feb 25)
  - Message not available
    - Re: http inspect editing Matt Kettler (Feb 25)