[Snort-inline-users] Re: I think that matching on uricontent is broken in 2.1.1

[Rob M. <ro...@ho...>]

> Could somebody else verify that uricontent matching is broken in
> snort_inline-2.1.1?  I can block based on content but not uricontent.  I
> tried turning on the http_inspect and http_inspect_server preprocessors,
> but snort-inline doesn't seem to match on the uricontent rules, no log, no
> drop, nothing.

only the content keyword works with snort_inline at this time.

Rob