Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Snort Advanced » http_inspect in 1.8 versa 2.3

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

http_inspect in 1.8 versa 2.3


Posted by chipanu on August 15, 2005 12:06:42

What are the main differences between the http_inspect preprocessor in 2.3 in comparison to 1.8?
What is the value that the new preprocessor brings in 2.3 compared to 1.8?

Thanks,
chipanu

Posted by roesch on August 18, 2005 20:08:37

It's a complete rewrite. The HTTP preprocessor in 1.8 was just a normalizer and was fairly static in how it
implemented handling various encoding types and so on. Check out the README.http_inspect for all the
features that it has.


site feedback | Terms of Use | Privacy Policy | forum archives ©2007 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.