Tag Info

New answers tagged

2

The normalized and non-normalized uri keywords works differently in snort. Normalization means parsing of the http_uri and then store into the buffer for matching. However in non-normalized uri will directly saved into the buffer without parsing. For example, suppose the http request came like, /somefile.php?username=%27;echo%20 Then for normalized uri ...



Top 50 recent answers are included