The problem here is Apt sends the following user agent: User-Agent: Ubuntu APT-HTTP/1.3 (0.7.20.2ubuntu6)
Snort is (correctly) asking the question: WTF is HTTP/1.3? The signature may need to verify the HTTP/X line is immediately preceding the first newline, rather than slopped somewhere else. That being said, I don't understand what apt is conveying here... -- apt-get update causes "WEB-MISC Invalid HTTP Version String" warning in Snort https://bugs.launchpad.net/bugs/258155 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
