[Secureideas-base-devel] Re: [Secureideas-base-user] BASE payload display doesn't show content after
Brought to you by:
secureideas,
sinukas
Menu
▾
▴
[Secureideas-base-devel] Re: [Secureideas-base-user] BASE payload display doesn't show content after 128 bytes
|
From: Kevin J. <kjo...@se...> - 2006-05-31 03:17:03
|
On May 30, 2006, at 5:12 AM, Laszkiewicz, Martin wrote: > We're in the progress of upgrading from ACID to BASE, and we've run > into the following problem: > When we display the packet contents in BASE, the display only ever > shows content up to a certain point - the rest of the packet is > 'lost'. This makes it difficult to check packet contemtsd to > confirm a positive/fale alarm manually. > > On the base screen, you get something like: > > There's a link on the side which allows you to 'Download of > Payload' link on the page, from where a .bin version of the payload > can be downloaded, and then viewed correctly (eg all 300bytes) in a > hex editor. > > On our ACID setup, the contents of the packet are displayed fine. > > Is there a way of changing this 127.5 byte display limit? I found > the following on Winsnort, but there is no solution listed: > > > http://www.winsnort.com/index.php?name=PNphpBB2&file=viewtopic&t=298 > > Our system is Snort 2.4.4, W2003 Server, with IIS6, MSSQL2000. > Any help would be appreciated. > Regards, > Martin Interesting... especially since the post you reference says ACID has the same probelm but in your install it doesn't. We will try to look into the code an see if we can find where this is happening.... Kevin --------------------- BASE Project Lead http://sourceforge.net/projects/secureideas http://base.secureideas.net The next step in IDS analysis! ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642 _______________________________________________ Secureideas-base-user mailing list Sec...@li... https://lists.sourceforge.net/lists/listinfo/secureideas-base-user |