Symantec™ Security Gateways Reference Guide - Sawmill

IDS eventsSuspicious activity387HTTP Malformed URLBase Event:Details:Response:Affected:HTTP_BAD_REQURL3The URL in an HTTP request did not conform to the HTTP RFC. This may be an attempt to exploitcertain server vulnerabilities.If seen in sufficient volume or variation, audit of client and server is recommended.No specific targets.False Positives: None known.ReferencesHTTP SpecificationsHTTP Malformed URLBase Event:Details:Response:Affected:HTTP_BAD_REQURL4The URL in an HTTP request did not conform to the HTTP RFC. This may be an attempt to exploitcertain server vulnerabilities.If seen in sufficient volume or variation, audit of client and server is recommended.No specific targets.False Positives: None known.ReferencesHTTP SpecificationsHTTP Malformed URLBase Event:Details:Response:Affected:HTTP_BAD_REQURL5The URL in an HTTP request did not conform to the HTTP RFC. This may be an attempt to exploitcertain server vulnerabilities.If seen in sufficient volume or variation, audit of client and server is recommended.No specific targets.False Positives: None known.ReferencesHTTP SpecificationsHTTP Malformed URLBase Event:Details:Response:Affected:HTTP_BAD_REQURL6_0The opaque section of the URL in an HTTP request did not conform to the HTTP RFC. This may bean attempt to exploit certain server vulnerabilities.If seen in sufficient volume or variation, audit of client and server is recommended.No specific targets.False Positives: None known.ReferencesHTTP Specifications