On Sun, 26 Oct 2014, Karsten Bräckelmann wrote:

On Fri, 2014-10-24 at 19:05 -0700, John Hardin wrote:

   uri    __ALL_URI  /.*/
      tflags __ALL_URI  multiple

That seemingly straight-forward approach does not work in this case. The
tflags multiple option does not make uri rules match multiple times on a
single URI extracted from the message. It still generates a single hit
per extracted URI only, not including multiple hits on its normalized
variations.

That makes sense. Thanks!

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
 877 days since the first successful private support mission to ISS (SpaceX)

Reply via email to