[Snort-sigs] Uricontent issue

Matthew Jonkman matt at ...2436...
Fri Jul 9 15:11:01 EDT 2004


They're hitting very well here. What settings do you have for http 
preprocessors?

Matt

Miner, Jonathan W (CSC) (US SSA) wrote:

> Sorry.. I've been away from my desk, and have not been paying attention.
> 
> I just checked, I have the "uricontent" rule in place, and have gotten ZERO hits from snort. The web proxy log file shows 215 requests.
> 




More information about the Snort-sigs mailing list