On Wed, 2012-09-26 at 12:48 +0200, Axb wrote: > On 09/26/2012 12:46 PM, Martin Gregorie wrote: > > On Wed, 2012-09-26 at 12:05 +0200, Axb wrote: > >> have you looked at the URIDetail plugin ? > >> > > I didn't know it existed until now, but it looks useful. It looks as if > > it can easily solve the OP's problem too. > > > > Martin > > > If you could create a couple of (working) sample rules, we could add to > SA documentation and to the SA ruleset (for masscheck) > I'll take a look at it this evening or tomorrow unless somebody beats me to it.
Martin
