Signature Detail
Short Name |
HTTP:EXPLOIT:SMALL-FIRST-DATA |
|---|---|
Severity |
Low |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Release Date |
2008/05/01 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Small First Packet
This signature detects a very small first data packet during an HTTP session. This may be an indication of "Session Slicing" which is an IPS evasion technique. The HTTP specification defines the minimum request size to be 15 bytes.