Re: [Snort-inline-users] uricontent matching v2

[pieter c. <pi...@co...>]

I tested that uricontent does in fact work in inline mode. Packets do
get decoded successfully and dropped if matched with a signature.

Pieter

On Fri, 2004-04-02 at 02:43, William Metcalf wrote:
> Has anybody been able to confirm or deny that uricontent matching is
> broken in 2.1.1? I would like to know so that if its the configuration
> that I'm running with, I can start to look there. If not, I don't mind
> trying to fumble my way through some c code to try to get it to work,
> if some one could point me in the right direction. I tried looking at
> the diff and the sp_pattern_match.c file, is this the correct place to
> start?
> 
> Regards,
> 
> Will