[Snort-users] Snort and gzip Encode Question

dajackman robby.lists at ...11827...
Fri Aug 19 06:18:27 EDT 2005


I'm trying to come up with a rule to catch this Internet Explorer
(.Net) 0day Exploit.  While playing around with a rule I came up with
a question I haven't found the answer to.  Can snort do anything with
compressed html/gzip
encoding?  A quick google search and SNORT Doc peek didn't produce
much.  Thanks.

-dajackman




More information about the Snort-users mailing list