Re: Proposed change to sid:24348 - I don't think it encompasses all the allowed X-Forwarded-For rules

[Scott Savarese <scott.savarese () vitals com>]

> On Jan 8, 2015, at 2:32 PM, waldo kitty <wkitty42 () windstream net> wrote:
>
> sounds like you have thousands of playas trying to cause problems with your 
> system(s)...

I've looked at most of the IP addresses... They are valid IP addresses of our customers. Plus looking at the data 
within the packets themselves, the rule is tripping on valid data. Things like IPv6 addresses. Shouldn't the valid data 
be included in the PCRE regex?
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!