[Snort-sigs] WEB-IIS ISAPI .printer not triggering in Snort 2.0.x

Coen Bakkers, Monitored Security coen.bakkers at ...1134...
Thu May 27 20:02:02 EDT 2004


I have noticed that Snort 2.0.x did not trigger the WEB-IIS ISAPI .printer rule as i launched the exploit for it. Snort 2.1.3RC1 triggered the http_inspect BARE BYTE ENCODING as well the WEB-IIS ISAPI .printer rule. Is this because the preprocessor normalized the alert so that the rule could trigger?

Thanks for your help.

Coen Bakkers 

More information about the Snort-sigs mailing list