[Snort-users] Re: http_preprocessor oddity with recent CVSsnapshot
fygrave at ...121...
Wed Apr 4 13:11:52 EDT 2001
On Wed, Apr 04, 2001 at 05:24:33PM +0200, Ralf Hildebrandt wrote:
> On Tue, Apr 03, 2001 at 10:23:34AM -0400, Martin Roesch wrote:
> > Sounds like it's not really turned off. Can you turn it off and then
> > "grep preprocessor snort.conf" and tell us what you get?
> > -Marty
> Hey, I'm not stupid. There's just this one line and it IS deactivated.
Hmm.. can we run snort in gdb and 'break PreprocUrlDecode' and then 'print check_iis_unicode'? :)
More information about the Snort-users