snort alert http_inspect OVERSIZE REQUEST-URI D...

 

119 為 http_inspect 的 generator id

由我機發出,應該不正常

...
[**] [119.15.1] (inspect_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
[Priority: 3]
07/03-10:37:07.707280 192.168.1.我機:60702 -> 216.239.116.50:80
TCP TTL:64 TOS:0x0 ID:27889 IpLen:20 DgmLen:1074 DF
***AP*** Seq: 0x2EB58C09 Ack: 0x8902D676 Win 0x16D0 TcpLen:20
...

Priority: 3 沒很重要

網上查出在 /etc/snort/snort.conf 改,因微軟東東

...
oversize_dir_length 500000
...

我加長到 500000

不知可否??

你可能感兴趣的:(firewall,snort,ids)