[Snort-users] Snort and gzip Encode Question

dajackman robby.lists at ...11827...
Fri Aug 19 06:18:27 EDT 2005

I'm trying to come up with a rule to catch this Internet Explorer
(.Net) 0day Exploit.  While playing around with a rule I came up with
a question I haven't found the answer to.  Can snort do anything with
compressed html/gzip
encoding?  A quick google search and SNORT Doc peek didn't produce
much.  Thanks.


More information about the Snort-users mailing list