RE: [Snort-inline-users] uricontent matching v2

[Brian J. <bja...@ci...>]

Pieter wrote:-

> Yes, the uricontent works and it decodes and drops packets that match
> in inline mode.
>
> Pieter
>
> On Fri, 2004-04-02 at 02:43, William Metcalf wrote:
>> Has anybody been able to confirm or deny that uricontent matching is
>> broken in 2.1.1? I would like to know so that if its the
>> configuration that I'm running with, I can start to look there. If
>> not, I don't mind trying to fumble my way through some c code to try
>> to get it to work, if some one could point me in the right
>> direction. I tried looking at the diff and the sp_pattern_match.c
>> file, is this the correct place to start?
>>
>> Regards,
>>
>> Will
>

Interesting, could the fact that some people say it works and some say it
does not be down to configuration. Pieter any chance you could post(failing
that send me) part of your config file. This may explain why William Metcalf
and others are failing to match. It would certainly speed up my updating of
snort_inline.

regards,
Brian