[Snort-users] http_inspect missing requests

Felix Erlacher felix.erlacher at ...17726...
Wed Feb 8 07:42:20 EST 2017


One packet resulting in 10 http GET requests is perfectly alright. Here,
HTTP/1.1 pipelining is used, which enables 10 GET requests in one TCP
segment.

greets

felix

On 08/02/17 13:04, James Lay wrote:
> One packet should not equal 10 HTTP GET's....something is amiss....I
> think this might be a bug.

-- 
Felix Erlacher

Institute of Computer Science
University of Innsbruck
ccs-labs.org/~erlacher

Key-ID:4EAC0959



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170208/5b313183/attachment.sig>


More information about the Snort-users mailing list