https://community.cisco.com/t5/network-security/snort-ml-http-post/m-p/5120190#M1113119 <P>Hello,</P><P>Thank you for open sourcing the SnortML with the latest Snort3 release. It's been exciting to test out the new functionality! I've tried replicating the demo on the blog post (<A href="https://blog.snort.org/2024/03/talos-launching-new-machine-learning.html" target="_blank" rel="noopener">https://blog.snort.org/2024/03/talos-launching-new-machine-learning.html</A>) with the HTTP URI detection, but I see that the HTTP POST body is optional? How do I go about trying this out? Do I have to pass an additional lua configuration specifying its use?</P><P>Best,</P><P>Ozzy</P> Thu, 30 May 2024 04:44:07 GMT ozzylee 2024-05-30T04:44:07Z https://community.cisco.com/t5/network-security/snort-ml-http-post/m-p/5120190#M1113119 <P>Hello,</P><P>Thank you for open sourcing the SnortML with the latest Snort3 release. It's been exciting to test out the new functionality! I've tried replicating the demo on the blog post (<A href="https://blog.snort.org/2024/03/talos-launching-new-machine-learning.html" target="_blank" rel="noopener">https://blog.snort.org/2024/03/talos-launching-new-machine-learning.html</A>) with the HTTP URI detection, but I see that the HTTP POST body is optional? How do I go about trying this out? Do I have to pass an additional lua configuration specifying its use?</P><P>Best,</P><P>Ozzy</P> Thu, 30 May 2024 04:44:07 GMT https://community.cisco.com/t5/network-security/snort-ml-http-post/m-p/5120190#M1113119 ozzylee 2024-05-30T04:44:07Z