ips-evasion.txt

Various commercial IPS products fail to decode HTTP requests that contain 0x0c, 0x0b, and 0x0d instead of normal 0×20/0×09 separators.

From: H. D. Moore