[Snort-sigs] Possible trojan rule

Matthew Jonkman matt at ...2436...
Thu Jun 3 10:24:04 EDT 2004

No, I don't on the test box I was using. It was killing me with false's.

That'd be the problem. THanks for pointing that out.


larosa, vjay wrote:

> Do you have the http_inspect preprocessor turned on in your snort.conf? 
> vjl

More information about the Snort-sigs mailing list