Re: oversize_chunk_encoding

[chris ryan <chris.ryan () gmx de>]

Sascha Hintz schrieb:

> the first problem is that the preprocessor only accepts the
> default server configuration.

> I have added a special individual server configuration because is
> the firewall but with no affect.

What is the snort/httpinspect startup output about that?
I suggest you to read the manual oder README for the http-inspect, as
this preproc with it's profiles can be confusing sometimes.

> the second problem is how can i deactivate oversize_cunk_encoding ?
In the corresponding server profile or in the new prerpoc.rules
(HI-CLIENT*), i guess.


bye, Chris.





-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users