Project

General

Profile

Actions

Bug #2000

closed

eve.http: http_refer should be http_referer

Added by Anonymous almost 8 years ago. Updated over 1 year ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

In normal output mode Suricata writes http_referer, but the json output is just http_refer

log-file.c:        fprintf(fp, "\"http_referer\": \"");
output-json-http.c:            json_object_set_new(js, "http_refer", json_string(c));

Related issues 1 (1 open0 closed)

Related to Suricata - Task #2167: tracking: eve enhancementsNewOISF DevActions
Actions #1

Updated by Andreas Herz almost 8 years ago

Would you like to submit a patch via github PR? :)
See https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Contributing

Actions #2

Updated by Anonymous almost 8 years ago

Andreas Herz wrote:

Would you like to submit a patch via github PR? :)
See https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Contributing

I forgot to update the ticket, the pull request is on Github with id: #2478

Actions #4

Updated by Victor Julien almost 8 years ago

  • Subject changed from Typo in output-json-http.c to eve.http: http_refer should be http_referer
  • Status changed from New to Assigned
  • Target version set to 70
Actions #5

Updated by Andreas Herz over 5 years ago

  • Assignee changed from Anonymous to Stian Bergseth
Actions #6

Updated by Andreas Herz over 5 years ago

this was discussed in the PR as it's a breaking change, is this something we might want to include in 5.0?

Actions #7

Updated by Victor Julien about 5 years ago

  • Related to Task #2167: tracking: eve enhancements added
Actions #8

Updated by Victor Julien over 4 years ago

  • Target version changed from 70 to TBD
Actions #9

Updated by Victor Julien over 1 year ago

  • Status changed from Assigned to Rejected
  • Assignee deleted (Stian Bergseth)
  • Priority changed from Low to Normal
  • Target version deleted (TBD)

Typo is in the RFC, so leaving as is.

Actions

Also available in: Atom PDF