<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I assume you have sniffed the traffic going over the interface and is able to verify POST traffic is flowing past the interface?<div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Warmly,</div><div class=""><br class=""></div><div class="">John Menerick</div><div class=""><a href="https://securesql" class="">https://securesql</a>.info</div><div class=""><br class=""></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jul 22, 2015, at 12:41 PM, gsn security <<a href="mailto:vasugameloft@gmail.com" class="">vasugameloft@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div dir="ltr" class="">Hello Everyone,<div class=""><br class=""></div><div class="">I am new to Suricata, I have my ids set -up to receive all Attacks that we coming from both POST and GET requests, unfortunately , My ids is not picking up all the POST attacks especially the SQL injection attempts form POST parameters. I have tried to modify the sql injection rules but nothing wors? Do you have any idea why it is not detecting sql injection attacks coming from POST?</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Thanks and Regards</div><div class="">Vasu</div></div>
_______________________________________________<br class="">Discussion mailing list<br class=""><a href="mailto:Discussion@lists.openinfosecfoundation.org" class="">Discussion@lists.openinfosecfoundation.org</a><br class="">https://lists.openinfosecfoundation.org/mailman/listinfo/discussion<br class="">Suricata User Conference: Nov 4/5 in Barcelona: http://oisfevents.net<br class="">User and Developer trainings: http://suricata-ids.org/training/<br class=""></div></blockquote></div><br class=""></div></body></html>