Snort mailing list archives

Re: Falses on 2011032/ET SCAN HTTP POST invalid method case?

From: Packet Hack <pckthck () gmail com>
Date: Mon, 26 Mar 2012 11:59:45 -0400

Trying to get one that will trip the sig, will let you know.

-- pckthck

On Fri, Mar 23, 2012 at 11:09 AM, Russ Combs <rcombs () sourcefire com> wrote:

Can you send a pcap?  That will help isolate any segmentation issues.


------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread:

Falses on 2011032/ET SCAN HTTP POST invalid method case? Packet Hack (Mar 22)
- Re: Falses on 2011032/ET SCAN HTTP POST invalid method case? livio Ricciulli (Mar 22)
  - Re: Falses on 2011032/ET SCAN HTTP POST invalid method case? Russ Combs (Mar 23)
    - Re: Falses on 2011032/ET SCAN HTTP POST invalid method case? Packet Hack (Mar 26)