[Snort-users] base64 for http_inspect

Bhagya Bantwal bbantwal at ...1935...
Mon Aug 2 13:10:41 EDT 2010


Yes they are Snort 2.9.0 options.

-B

On Mon, Aug 2, 2010 at 12:13 PM, Paul Dokas <dokas at ...14952...> wrote:

> Are base64_decode and base64_data Snort 2.9.0 options?  I don't see them
> anywhere in the 2.8.6 source, the manual that's in the distribution or
> the manual available online via www.snort.org.
>
> Paul
>
>
>
> On 08/02/10 09:21, Bhagya Bantwal wrote:
> > Base64 decoding for HTTP is implemented using the rule options
> > base64_decode and base64_data (Please refer to the snort manual for more
> > information).
> >
> > We will update the README.http_inspect and remove the following obsolete
> > documentation.
> >
> > -B
> --
> Paul Dokas                                     dokas at oitsec.umn.edu
> ======================================================================
> Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."
>
>
> ------------------------------------------------------------------------------
> The Palm PDK Hot Apps Program offers developers who use the
> Plug-In Development Kit to bring their C/C++ apps to Palm for a share
> of $1 Million in cash or HP Products. Visit us here for more details:
> http://p.sf.net/sfu/dev2dev-palm
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100802/ccc824ba/attachment.html>


More information about the Snort-users mailing list