[Snort-devel] DOUBLE DECODING ATTACK

Julien VARLET jvarlet at ...2908...
Fri Oct 13 06:12:05 EDT 2006


Hi,

I get a lot of DOUBLE DECODING ATTACK when http preprocessor is active, but it is only false positives... I do not want to desactivate http preprocessor. How can I do ?

Thanks.


To: snort.user at ...2499...
    snort-users at lists.sourceforge.net
    snort-devel at lists.sourceforge.net






More information about the Snort-devel mailing list