
<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body>Hi,<div>Since Snort v2.9.0, it's allow two http_uri followed by within/distance.</div><div><br></div><div>Like this : (GET /abc.html)</div><div> '... content:"/a"; nocase; depth:2; offset:0; http_uri; content:"bc"; nocase; within:2; distance:0; http_uri; ...'</div><div><br></div><div>But Suricata v1.3.0 not fire (no errors).</div><div>It's possible to add this feature please ?</div><div><br></div><div>Regards</div><div>Rmkml</div><div><br></div></body></html>