[Snort-users] base64 for http_inspect

Paul Dokas dokas at ...14952...
Mon Aug 2 12:13:10 EDT 2010


Are base64_decode and base64_data Snort 2.9.0 options?  I don't see them
anywhere in the 2.8.6 source, the manual that's in the distribution or
the manual available online via www.snort.org.

Paul



On 08/02/10 09:21, Bhagya Bantwal wrote:
> Base64 decoding for HTTP is implemented using the rule options
> base64_decode and base64_data (Please refer to the snort manual for more
> information).
> 
> We will update the README.http_inspect and remove the following obsolete
> documentation.
> 
> -B
-- 
Paul Dokas                                     dokas at oitsec.umn.edu
======================================================================
Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."




More information about the Snort-users mailing list