[Snort-users] Snort3: http_encode rule option

Meridoff oagvozd at gmail.com
Thu Feb 14 05:04:12 EST 2019


Thanks for the response. I've just wanted to know why it was disapeared,
and I've found out it.


ср, 13 февр. 2019 г. в 23:07, Tom Peters (thopeter) <thopeter at cisco.com>:

> Hi,
>
>
>
> We deleted the http_encode rule option when we developed Snort3 because no
> one seemed to use it. It didn't appear in any of our rule sets.
>
>
>
> Do you have a use for it? What are you trying to accomplish?
>
>
>
> Tom
>
>
>
>
>
>
>
>
>
> *From: *Snort-users <snort-users-bounces at lists.snort.org> on behalf of
> Meridoff via Snort-users <snort-users at lists.snort.org>
> *Reply-To: *Meridoff <oagvozd at gmail.com>
> *Date: *Wednesday, February 13, 2019 at 5:32 AM
> *To: *"snort-users at lists.snort.org" <snort-users at lists.snort.org>
> *Subject: *[Snort-users] Snort3: http_encode rule option
>
>
>
> Hello, http_encode was deleted in snort3. How I can alert on this or that
> http encoding using rule for snort3 rule syntax ?
>
> Thanks
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20190214/2297883c/attachment.html>


More information about the Snort-users mailing list