[Snort-users] Question

William Pearson william at cnsp.net
Fri Sep 22 11:46:53 EDT 2017


I'm using BASE, and the results snort is giving me is beyond vague. I
presume this is an issue with the rules and preprocessing. I couldn't care
less about what preprocessor is being used. I'm singularly interested in
the actual rule. Why won't it show me the message field in the actual rules?

[snort <http://www.snort.org/search/sid/120-3>] http_inspect: NO
CONTENT-LENGTH OR TRANSFER-ENCODING IN HTTP RESPONSE


Will
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170922/1e93665b/attachment.html>


More information about the Snort-users mailing list