Snort mailing list archives
Re: oversize_chunk_encoding
From: chris ryan <chris.ryan () gmx de>
Date: Wed, 02 Jul 2008 11:18:37 +0200
Sascha Hintz schrieb:
the first problem is that the preprocessor only accepts the default server configuration.
I have added a special individual server configuration because is the firewall but with no affect.
What is the snort/httpinspect startup output about that? I suggest you to read the manual oder README for the http-inspect, as this preproc with it's profiles can be confusing sometimes.
the second problem is how can i deactivate oversize_cunk_encoding ?
In the corresponding server profile or in the new prerpoc.rules (HI-CLIENT*), i guess. bye, Chris. ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- oversize_chunk_encoding Sascha Hintz (Jul 02)
- Re: oversize_chunk_encoding chris ryan (Jul 02)
- Message not available
- Message not available
- Re: oversize_chunk_encoding chris ryan (Jul 02)
- Message not available