Re: http_header usage

["lists () packetmail net" <lists () packetmail net>]

On 04/22/2014 02:32 AM, Cagri Ersen wrote:
> max_header_length 0 \ max_headers 0 \ max_spaces 0 \

I'm pretty sure this is where the problem is.  Check out
https://www.snort.org/vrt/snort-conf-configurations/ where these values are
defined as:

    max_header_length 750 \
    max_headers 100 \
    max_spaces 200 \

I'm pretty sure that based on those configuration directives with values being
set to zero you've effectively disabled the http_* buffers.

Cheers,
Nathan Fowler

------------------------------------------------------------------------------
Start Your Social Network Today - Download eXo Platform
Build your Enterprise Intranet with eXo Platform Software
Java Based Open Source Intranet - Social, Extensible, Cloud Ready
Get Started Now And Turn Your Intranet Into A Collaboration Platform
http://p.sf.net/sfu/ExoPlatform
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!