|
|
|
|
|
by jedberg
2962 days ago
|
|
It would look at the http request and break it down by uri, host, parameters, cookies, etc. A signature was some combo of those. It also did layer 2 and 3 detection and looked for the stuff mentioned below like IP and port and if the 3 way handshake was “normal”. Stuff like that. |
|