Re: http_inspect: Oversize Chunk Request : more info

["Keith W. McCammon" <mccammon () gmail com>]

Try these for starters.  There's tons of info on Google.

http://www.microsoft.com/technet/security/bulletin/MS02-028.mspx

http://www.cert.org/advisories/CA-2002-17.html

On Mon, 02 Aug 2004 09:21:02 +1000, Rudi Starcevic <tech () wildcash com> wrote:
> Hi,
>
> Over the weekend I've had over 50,000 http_inspect: OVERSIZE CHUNK
> ENCODING  alerts.
> When I click on the alert for more info the snort page comes up blank -
> sid 16.
>
> I've searched on Google but haven't been able to find a simple explanation.
> Could someone please point me to where I can find out more about this alert?
>
> Many thanks.
> Regards,
> Rudi.
>
> -------------------------------------------------------
> This SF.Net email is sponsored by OSTG. Have you noticed the changes on
> Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
> one more big change to announce. We are now OSTG- Open Source Technology
> Group. Come see the changes on the new OSTG site. www.ostg.com
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users