Project

General

Profile

Actions

Feature #1008

closed

Optionally have http_uri buffer start with uri path for use in proxied environments

Added by Will Metcalf almost 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

We need a toggle in the libhtp config to have the http_uri buffer point to the beginning of the URI path for proxied environments. We often use pcre with anchors, urilen, depth/offset etc in a uri which breaks when host is contained with-in the URI. http_uri now points to start of path in snort.

See the "touched by a proxy" threads on the following for importance.
https://lists.emergingthreats.net/pipermail/emerging-sigs/2013-February/thread.html#21502
https://lists.emergingthreats.net/pipermail/emerging-sigs/2013-April/thread.html#21722

Actions #1

Updated by Victor Julien almost 8 years ago

  • Status changed from New to Assigned
  • Target version changed from 2.0rc2 to 2.0beta2
Actions #2

Updated by Victor Julien almost 8 years ago

  • Status changed from Assigned to Closed
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF