[Snort-users] WEBDAV propfind rule

Brian Caswell bmc at ...312...
Fri Mar 23 23:46:46 EST 2001


Ok, I'm going through the rules cleaning up a bunch of false
possitives.  The PROPFIND rule has been driving a number of users
batty.  I installed the broken version of WEBDAV that is referenced by
IDS475.  The only XML tag that I could get to make it give me a
directory listening is:

  <a:propfind xmlns:a="DAV:"\>



More information about the Snort-users mailing list