[Snort-users] http_decode_preprocessor

Andrea Barisani lcars at ...96...
Mon Jan 8 07:05:34 EST 2001


Hi to all!

I'm using snort 1.7 and I'm getting a LOT of false alert from the http
decode preprocessor (IIS Unicode Attack), so I have disable in the
preprocessor source code the alerting and loggin functions.

Is this a common problem?

Bye

------------------------------------------------------------
INFIS Network Administrator & Security Officer
Department of Physics       - University of Trieste
lcars at ...96... - PGP Key 0x8E21FE82
------------------------------------------------------------
"How would you know I'm mad?" said Alice.
"You must be,'said the Cat,'or you wouldn't have come here."
------------------------------------------------------------





More information about the Snort-users mailing list