[Snort-sigs] Possible trojan rule

Matthew Jonkman matt at ...2436...
Thu Jun 3 10:24:04 EDT 2004


No, I don't on the test box I was using. It was killing me with false's.

That'd be the problem. THanks for pointing that out.

Matt

larosa, vjay wrote:

> Do you have the http_inspect preprocessor turned on in your snort.conf? 
> 
> vjl
> 




More information about the Snort-sigs mailing list