From: Tom Peters <thopeter@cisco.com>
Date: Wed, 4 Jun 2014 17:09:20 +0000 (-0400)
Subject: Config changes for new HTTP development
X-Git-Tag: 3.0.0-233~1501^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b9716ab596bab30eeae69522710d3cb1185bf259;p=thirdparty%2Fsnort3.git

Config changes for new HTTP development
---

diff --git a/lua/snort.lua b/lua/snort.lua
index 7fa586712..36fb2ad99 100644
--- a/lua/snort.lua
+++ b/lua/snort.lua
@@ -256,6 +256,8 @@ arp_spoof =
 
 back_orifice = { }
 
+nhttp_inspect = { test_mode = false }
+
 rpc_decode = { }
 
 port_scan_global = { memcap = 10000000 }
@@ -572,6 +574,7 @@ default_rules =
 
 #alert tcp any any -> any 80 ( sid:1; msg:"1"; content:"HTTP"; )
 #alert tcp any 80 -> any any ( sid:2; msg:"2"; content:"HTTP"; )
+#alert tcp any any -> any any (msg:"Sample rule for Snort++"; content:"trigger", http_uri; sid:1;)
 alert ( gid:129; sid:20; )
 ]]