Re: Snort3: http_encode rule option

[Meridoff via Snort-users <snort-users () lists snort org>]

Thanks for the response. I've just wanted to know why it was disapeared,
and I've found out it.


ср, 13 февр. 2019 г. в 23:07, Tom Peters (thopeter) <thopeter () cisco com>:

> Hi,
>
>
>
> We deleted the http_encode rule option when we developed Snort3 because no
> one seemed to use it. It didn't appear in any of our rule sets.
>
>
>
> Do you have a use for it? What are you trying to accomplish?
>
>
>
> Tom
>
>
>
>
>
>
>
>
>
> *From: *Snort-users <snort-users-bounces () lists snort org> on behalf of
> Meridoff via Snort-users <snort-users () lists snort org>
> *Reply-To: *Meridoff <oagvozd () gmail com>
> *Date: *Wednesday, February 13, 2019 at 5:32 AM
> *To: *"snort-users () lists snort org" <snort-users () lists snort org>
> *Subject: *[Snort-users] Snort3: http_encode rule option
>
>
>
> Hello, http_encode was deleted in snort3. How I can alert on this or that
> http encoding using rule for snort3 rule syntax ?
>
> Thanks
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette