[Snort-users] http_inspect: Oversize Chunk Request : more info

Keith W. McCammon mccammon at ...11827...
Sun Aug 1 17:47:02 EDT 2004


Try these for starters.  There's tons of info on Google.

http://www.microsoft.com/technet/security/bulletin/MS02-028.mspx

http://www.cert.org/advisories/CA-2002-17.html

On Mon, 02 Aug 2004 09:21:02 +1000, Rudi Starcevic <tech at ...12014...> wrote:
> Hi,
> 
> Over the weekend I've had over 50,000 http_inspect: OVERSIZE CHUNK
> ENCODING  alerts.
> When I click on the alert for more info the snort page comes up blank -
> sid 16.
> 
> I've searched on Google but haven't been able to find a simple explanation.
> Could someone please point me to where I can find out more about this alert?
> 
> Many thanks.
> Regards,
> Rudi.
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by OSTG. Have you noticed the changes on
> Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
> one more big change to announce. We are now OSTG- Open Source Technology
> Group. Come see the changes on the new OSTG site. www.ostg.com
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>




More information about the Snort-users mailing list