[Snort-users] Re: http_preprocessor oddity with recent CVSsnapshot

Fyodor fygrave at ...121...
Wed Apr 4 13:11:52 EDT 2001


On Wed, Apr 04, 2001 at 05:24:33PM +0200, Ralf Hildebrandt wrote:
> On Tue, Apr 03, 2001 at 10:23:34AM -0400, Martin Roesch wrote:
> > Sounds like it's not really turned off.  Can you turn it off and then
> > "grep preprocessor snort.conf" and tell us what you get?
> > 
> >     -Marty
> 
> Hey, I'm not stupid. There's just this one line and it IS deactivated.
> 

Hmm.. can we run snort in gdb and 'break PreprocUrlDecode' and then 'print check_iis_unicode'? :)




More information about the Snort-users mailing list