[Oisf-users] How to alert for a single TCP packet?

Lucas lama2 at cin.ufpe.br
Mon Nov 25 18:47:20 UTC 2019

Hi David, thank you. Yes... I also got confused about the "../" string, 
i don't find it in the packet but the rule matches and alerts. It was 
also a question i'm about to ask you guys. What do you mean by http_uri 
be normalized?

More information about the Oisf-users mailing list