Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 2 subscribers
  • Views 6793 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BARE BYTE UNICODE ENCODING

WmLongman
I am getting tons of these messages in my intrusion detection log but I see now rule that's firing this. Here is the line from the log:

 [ QUOTE ]
[119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING  {PROTO006}  

[/ QUOTE ] 

Any way I can stop this from logging? It's filling up my log space rapidly.


This thread was automatically locked due to age.
Parents
  • 0
    That's not triggered by a rule - it's from the Snort http_inspect preprocessor. The message means that a web client uses a non-standard encoding for UTF-8 values. If possible, check the client which causes these alarms.
Reply
  • 0
    That's not triggered by a rule - it's from the Snort http_inspect preprocessor. The message means that a web client uses a non-standard encoding for UTF-8 values. If possible, check the client which causes these alarms.
Children
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?