Snort mailing list archives

Re: [PATCH]: Add "iis_encode" parameter to manual for http_encode


From: Joel Esler <jesler () sourcefire com>
Date: Tue, 21 Dec 2010 09:31:14 -0500

Bug has been filed.

Joel

On Dec 20, 2010, at 7:34 PM, <Joshua.Kinard () us-cert gov> <Joshua.Kinard () us-cert gov> wrote:


Hi snort-devel,

Attached is a proposed patch for the manual (against 2.9.0.3) that adds
the undocumented "iis_encode" parameter to http_encode.  This parameter
appears to check for IIS Unicode encoding, per the source code in
http_encode's parsing function.  Should consideration be given to
renaming this to "iis_unicode"?  This would match up with one of the
configuration directives for the HTTP Inspection preprocessor.

Cheers,

--J
<snort-2.9.0.3-manual-http_encode.patch>------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel


------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel


Current thread: