[Snort-users] One problem about URI pattern Match.

隅主 yuzhu428 at ...14360...
Fri Jun 6 02:40:17 EDT 2008


Dear All,

 If a packet has uri-content(p->uri_count>0 && UriBufs[i].uri!=NULL), it's content will be check in mpseSearch(). That's right.
 Now I want to know will it be check in otnx_match()(CheckUriPatternMatch()) again? why?
 Thanks a lot.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20080606/41becf9f/attachment.html>


More information about the Snort-users mailing list