RE: [Snort-inline-users] Re: I think that matching on uricontent is broken in 2.1.1

[Brian J. <bja...@ci...>]

>> Could somebody else verify that uricontent matching is broken in
>> snort_inline-2.1.1?  I can block based on content but not uricontent.  I
>> tried turning on the http_inspect and http_inspect_server preprocessors,
>> but snort-inline doesn't seem to match on the uricontent rules, no log,
no
>> drop, nothing.
>
>only the content keyword works with snort_inline at this time.
>
>Rob

Rob,
	Could you give me some guidance on when the uricontent will be working
again. I was planning on upgrading from 2.0.5 Build 98 to match my other
snort sensors which are 2.1.1 and the uricontent features heavily in the
subset of rules I use. Is it planned as an interim release for 2.1.1 or are
you waiting for 2.1.2?

regards,
Brian