next up previous contents
Next: Format Up: Payload Detection Rule Options Previous: Format   Contents

urilen

The urilen keyword in the Snort rule language specifies the exact length, the minimum length, the maximum length, or range of URI lengths to match. By default the raw uri buffer will be used. With the optional <uribuf> argument, you can specify whether the raw or normalized buffer are used.



Subsections

Eugene Misnik 2013-05-08