[Snort-users] IIS Unicode check on port 443

Brian Caswell bmc at ...312...
Fri Jan 5 13:48:04 EST 2001


"Adams, Gavin" wrote:

> For the time being I've removed port 443 for the preprocessor line.

You are correct.  Until the ssldump+snort patches come along, I would
remove
443 from your http-decode preprocessor line.  3128 would be a better
port to 
add by default.  (Squid default cache port)

-brian




More information about the Snort-users mailing list