Snort mailing list archives

Depth + HTTP_Method


From: Chris Granger <chrisgrangerx () gmail com>
Date: Thu, 4 Aug 2011 15:08:16 -0400

I've noticed some rules here and there that apply both depth and http_method options to certain content matches, 

e.g.
content:"GET"; depth:3; http_method;

I suppose depth is redundant here, but does it have any impact, positive or negative, on packet processing?

Thanks,
Chris

Sent from my iPhone
------------------------------------------------------------------------------
BlackBerry&reg; DevCon Americas, Oct. 18-20, San Francisco, CA
The must-attend event for mobile developers. Connect with experts. 
Get tools for creating Super Apps. See the latest technologies.
Sessions, hands-on labs, demos & much more. Register early & save!
http://p.sf.net/sfu/rim-blackberry-1
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Current thread: