Re: snort SID 119-15

[JJC <cummingsj () gmail com>]

As a matter of information-finding-assistance..

Under the doc directory in the snort tarball you will find loads of
docs on all of the preprocessors (pretty much all gids that are not 1
or 3).

$ grep 119 doc/*
README.http_inspect:HTTP Inspect used generator ID 119 and 120.  HTTP
Inspect can generate the
README.http_inspect:following alerts under generator ID 119:
Binary file faq.pdf matches
generators:http inspect client        119 # HTTP Inspect
Binary file snort_manual.pdf matches


On Thu, Dec 16, 2010 at 8:56 AM, Sandro guly Zaccarini
<guly () luv guly org> wrote:
> On Thu, Dec 16, 2010 at 10:48:31AM -0500, Lawrence R. Hughes, Sr. wrote:
> > Hi,
> >
> > Where the this rule: sid:119-15 reside in the system?
>
> doc/README.http_inspect
>
> sz
> --
>  /"\   taste your favourite IT consultant
>  \ /   gpg public key http://www.guly.org/guly.asc
>   X
>  / \
>
>
> ------------------------------------------------------------------------------
> Lotusphere 2011
> Register now for Lotusphere 2011 and learn how
> to connect the dots, take your collaborative environment
> to the next level, and enter the era of Social Business.
> http://p.sf.net/sfu/lotusphere-d2d
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users