Re: [Snort-users] Help finding README_http_inspect

Thanks, already have it upgrading my version.

One more question. I am trying to set up my http_inspect preprocessor.
If I have a Squid proxy listening on ports 80 and 8080, do I need to
configure a preprocessor http_inspect_server for it? And should I use
apache profile?

If I am using any other web server (neither IIS nor Apache), do I need
to configure a preprocessor http_inspect_server for it? If so, which
profile?

And same question about application servers, like AOL for example. Do I
need to configure http_inspect_server for it? Which profile?

I have already read README_http_inspect but I have still some doubts
about it. Sorry but I do not have much knowledge about http servers and
the way they work!!

Thanks again.



Joel Esler escribiÃ:
> Looks like you have a very old version of the debian package of
> Snort.  I suggest you download Snort from scratch and compile.
>
> Don't rely on the debian package of Snort.  It's extremely old.
>
> Joel
>
> On Dec 26, 2007, at 7:07 AM, Jorge Cuevas wrote:
>
> > Hi all,
> >
> > Every time I search for doc about http_inspect, every body talk about a
> > file called README.http_inspect.
> > I can not find this file in my snort installation. Can anyone tell me
> > where to find it? Neither couldnt find it in snort.org/doc.
> >
> > Thanks in advance,
> >
> > Jorge
> >
> >
> >
> > dpkg -L snort
> >
> > /usr/share
> > /usr/share/doc
> > /usr/share/doc/snort
> > /usr/share/doc/snort/AUTHORS
> > /usr/share/doc/snort/BUGS
> > /usr/share/doc/snort/NEWS.gz
> > /usr/share/doc/snort/USAGE.gz
> > /usr/share/doc/snort/README.FLEXRESP
> > /usr/share/doc/snort/README.PLUGINS
> > /usr/share/doc/snort/README.Debian.gz
> > /usr/share/doc/snort/README.csv
> > /usr/share/doc/snort/snort_rules.html
> > /usr/share/doc/snort/README.Maintainer
> > /usr/share/doc/snort/NEWS.Debian.gz
> > /usr/share/doc/snort/TODO.Debian
> > /usr/share/doc/snort/copyright
> > /usr/share/doc/snort/changelog.gz
> > /usr/share/doc/snort/CREDITS.gz
> > /usr/share/doc/snort/README.gz
> > /usr/share/doc/snort/README.database.gz
> > /usr/share/doc/snort/changelog.Debian.gz
> >
> >
> > -------------------------------------------------------------------------
> >
> > This SF.net email is sponsored by: Microsoft
> > Defy all challenges. Microsoft(R) Visual Studio 2005.
> > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users@lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users


-- 
Jorge Cuevas GonzÃlez          <jcuevas@nesys-st.com>
Director de Proyectos           www.nesys-st.com
Tfno: 94 406 0546               MÃvil: 617165161
GPG: 3C1C CE59 3258 07C6 BB44 76B2 7861 9F93 9710 0C6F


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users