next up previous contents
Next: Format Up: Payload Detection Rule Options Previous: Format   Contents


The urilen keyword in the Snort rule language specifies the exact length, the minimum length, the maximum length, or range of URI lengths to match. By default the raw uri buffer will be used. With the optional <uribuf> argument, you can specify whether the raw or normalized buffer are used.


Eugene Misnik 2013-05-08