[Snort-users] How much of a stream(javascript) is actually blocked on event?

waldo kitty wkitty42 at ...14940...
Mon Jan 27 19:47:01 EST 2014

On 1/27/2014 12:59 PM, Lil Evil wrote:
> Now, if I download the URL from a linux client with wget the javascript is being
> downloaded until the comment is reached and then it ll stop further downloading
> and hangs.
> However, a considerable amount of the javascript is already being downloaded
> until the comment section is reached. I do not know how much of this javascript
> is being executed, or any at all, but my expectation would be that the complete
> stream would be blocked.

a block or alert can't be initiated until a match has been made ;)

NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

More information about the Snort-users mailing list