Snort mailing list archives

http_inspect ?

From: John Hally <JHally () epnet com>
Date: Thu, 28 Jul 2005 11:06:03 -0400

Hello All,

 

Just as a sanity check I have a question.  When this preprocessor is
enabled, and you have a farm of IIS servers, I should expect this
preprocessor to start firing alerts for Bare Byte, IIS Unicode, Double
Decode, etc.   Correct?

 

Thanks!

Current thread:

http_inspect ? John Hally (Jul 28)