[Snort-users] trouble with http_inspect

Larry Wichman larrywichman at ...131...
Mon Oct 18 09:32:06 EDT 2004

I am having trouble config'n my http inspect preprocessor. I do not want Apache_Whitespace alerts. Here is my config:
preprocessor http_inspect: global \
    iis_unicode_map unicode.map 1252\
preprocessor http_inspect_server: server default \
    profile all ports { 80 8080 8180 } oversize_dir_length 500 \
    apache_whitespace no 
Here is my error:
ERROR: /etc/snort/snort.conf(290) => Invalid IIS codemap argument.
Line 290 is 'apache_whitespace no'
Can someone tell me what I am doing wrong?

Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041018/be111f5c/attachment.html>

More information about the Snort-users mailing list