Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Snort Advanced » Bare Byte Unicode Encoding

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Bare Byte Unicode Encoding


Posted by Macca83 on March 14, 2005 13:24:22

I am getting a lot of (http_inspect)BARE BYTE UNICODE ENCODING alerts, from many hosts communicating with a proxy server, is there legitimate traffic that will cause these alerts?

Posted by nigel on March 16, 2005 09:46:52

Take a look in your snort source doc directory at README.http_inspect. Pay particular attention to the sections concerning proxy usage and bare byte encoding.
site feedback | Terms of Use | Privacy Policy | forum archives ©2007 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.