[Snort-users] Alerts of "(http\_inspect) NON-RFC DEFINED CHAR"

Jeremy Hewlett jh at ...1935...
Fri Feb 27 07:47:11 EST 2004


On Fri, Feb 27, Gabriel Assis Amancio wrote:
> 
> 	After this, I change my configuration for this:
> 
> 		
> 		preprocessor http_inspect: global \
> 		    iis_unicode_map unicode.map 1252
> 
> 		preprocessor http_inspect_server: server default \
> 		    profile all \
> 		    ports { 80 3128 8080 } \
> 		    no_alerts
> 
> 	And now, I only receive "(http\_inspect) NON-RFC DEFINED CHAR" alerts ..
> 	How I do to not receive this alerts ?!??

In 2.1.0, no_alerts didn't suppress NON-RFC DEFINED CHAR - this is
fixed in 2.1.1.







More information about the Snort-users mailing list