Re: Having http_inspect problems, can't turn options off

[Jeremy Hewlett <jh () sourcefire com>]

On Fri, Aug 06, Chris Schock wrote:
> I am using Snort 2.2 RC1

...

> My problem is that I am still getting lots and lots of "BARE BYTE UNICODE
> ENCODING" alerts for both servers, despite trying to suppress that
> specific alert for one, and turning alerting completely off for the other.
> I tried turning it off globally as well, but whenever I try that snort
> complains that there is a configuration problem.

Could you check out the SNORT_2_2 branch and try that out? An issue
with suppression was addressed, as well as some minor tweaks to
http_inspect. 

Lemme know if that does any better for you.



-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users