Re: URI_HEX fp

2018-11-12 Thread Martin Gregorie
On Mon, 2018-11-12 at 20:20 -0500, Alex wrote: > Hi, this doesn't look like it should be considered a hex URI. > > Nov 12 20:14:16.376 [15295] dbg: rules: ran uri rule URI_HEX ==> > got hit: "https://api-89c8e17d"; > I didn't get any joy from playing with this one. By assuming that it 89c9e17

Re: URI_HEX fp

2018-11-12 Thread John Hardin
On Mon, 12 Nov 2018, Alex wrote: Hi, this doesn't look like it should be considered a hex URI. Nov 12 20:14:16.376 [15295] dbg: rules: ran uri rule URI_HEX ==> got hit: "https://api-89c8e17d"; That satisfies the description: describe URI_HEXURI hostname has long hexadecimal seque

URI_HEX fp

2018-11-12 Thread Alex
Hi, this doesn't look like it should be considered a hex URI. Nov 12 20:14:16.376 [15295] dbg: rules: ran uri rule URI_HEX ==> got hit: "https://api-89c8e17d"; Nov 12 20:14:16.379 [15295] dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ==> got hit: "https://api-89c8e17d.duosecurity.com";