[Snort-sigs] filter http traffic

Jason Haar Jason_Haar at ...3686...
Wed May 23 20:53:39 EDT 2012

On 21/05/12 06:07, Balasubramaniam Natarajan wrote:
> One small question I doubt it that is possible because when I type in
> google.com <http://google.com> the browser automatically switches over
> to https://www.google.co.in/ so in that case we may not be able to
> trace it.

Yup, welcome to the end of NIDS. I am seeing more and more network
traffic "go dark". Security counteracting security - irony at its best :-(


Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

More information about the Snort-sigs mailing list