[Snort-sigs] WEB-IIS ISAPI .printer not triggering in Snort 2.0.x
Coen Bakkers, Monitored Security
coen.bakkers at ...1134...
Thu May 27 20:02:02 EDT 2004
I have noticed that Snort 2.0.x did not trigger the WEB-IIS ISAPI .printer rule as i launched the exploit for it. Snort 2.1.3RC1 triggered the http_inspect BARE BYTE ENCODING as well the WEB-IIS ISAPI .printer rule. Is this because the preprocessor normalized the alert so that the rule could trigger?
Thanks for your help.
More information about the Snort-sigs