Snort mailing list archives

Re: base64 for http_inspect


From: Paul Dokas <dokas () oitsec umn edu>
Date: Mon, 02 Aug 2010 11:13:10 -0500

Are base64_decode and base64_data Snort 2.9.0 options?  I don't see them
anywhere in the 2.8.6 source, the manual that's in the distribution or
the manual available online via www.snort.org.

Paul



On 08/02/10 09:21, Bhagya Bantwal wrote:
Base64 decoding for HTTP is implemented using the rule options
base64_decode and base64_data (Please refer to the snort manual for more
information).

We will update the README.http_inspect and remove the following obsolete
documentation.

-B
-- 
Paul Dokas                                     dokas at oitsec.umn.edu
======================================================================
Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."

------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://p.sf.net/sfu/dev2dev-palm
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: