http: byte-range support
Not currently supported by libhtp: https://github.com/OISF/libhtp/issues/58
Updated by Philippe Antoine over 1 year ago
My understanding is the following :
We now log the byte-range but we would like suricata to handle the complete file reassembly (in case there is any).
Is that correct ?
Is there already an example of suricata of reassembly over TCP ? And in this case over different flows ?
Updated by Philippe Antoine 8 months ago
- Status changed from In Review to Assigned
- Target version changed from 6.0.0beta1 to 7.0beta1
PR needs deeper work to have something generic over multiple flows cf https://forum.suricata.io/t/suricata-5-0-1-in-ips-mode/94