October 16, 2018, 03:24:56 PM

News : LinuxSolved.com Linux Help Community Forum..

Author Topic: Strange Snort alert  (Read 2359 times)

Offline MrWhisp

  • New Member
  • Posts: 2
Strange Snort alert
« on: May 24, 2004, 04:52:07 PM »

I don't know if this is the right place to post this question, but I try...

I am running Snort on my Linux station. The strange thing is that everytime I visit for example google I get an alert

05/24-15:37:26.969220 [**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**] {TCP} [My IP]:40190 -> [IP to google.com]:80

Does anyone know why I get this alert, and how can I get rid of this false alarms? I am not sure what http_inspect signatures check for...