Windows下配置Snort报错Unable to open the IIS Unicode Map file解决方法

在Snort安装目录文件夹etc下，修改文件snort.conf

找到下面这段内容，将preprocessor http_inspect中unicode.map的全路径给出

# HTTP normalization and anomaly detection.  For more information, see README.http_inspect
preprocessor http_inspect: global iis_unicode_map unicode.map 1252 compress_depth 65535 decompress_depth 65535
preprocessor http_inspect_server: server default \

修改后如下：

preprocessor http_inspect: global iis_unicode_map G:\Programs\Snort2.9.18.1\Snort\etc\unicode.map 1252 compress_depth 65535 decompress_depth 65535

注意，路径一定要使用\表示，如果使用/会产生以下报错：

ERROR: ../etc/snort.conf(290) => Unable to open the IIS Unicode Map file './G:/Programs/Snort2.9.18.1/Snort/etc/unicode.map'.