[Snort-devel] spp_unidecode

Martin Roesch roesch at ...48...
Fri Feb 23 00:29:21 EST 2001


This is good stuff, I'm going to try it out and we'll see about
including it in the 1.7.1 release...

   -Marty

anon wrote:
> 
> I whipped up a quick iis unicode decoder that is a drop
> in replacement for http_decode if anyone wants to
> play with it.  I'm still trying to determine all the mappings.
> I've got a couple of other sources to merge in, but it
> was able to decode all the requests hitting my network over
> the last few days.  Any of you european/asian guys that use
> more unicode want to try it?
> 
> Jason Larsen
> larsjaso at ...283...
> 
>   ------------------------------------------------------------------------
>                       Name: spp_unidecode.c
>    spp_unidecode.c    Type: Plain Text (TEXT/PLAIN)
>                   Encoding: BASE64
> 
>                       Name: spp_unidecode.h
>    spp_unidecode.h    Type: Plain Text (TEXT/PLAIN)
>                   Encoding: BASE64
> 
>               Name: codes.c
>    codes.c    Type: Plain Text (TEXT/PLAIN)
>           Encoding: BASE64
> 
>               Name: codes.h
>    codes.h    Type: Plain Text (TEXT/PLAIN)
>           Encoding: BASE64

--
Martin Roesch
roesch at ...48...
http://www.snort.org




More information about the Snort-devel mailing list