Project

General

Profile

Actions
Copy link

Feature #2661

open
HH CT

output the http-body-data to eve.json

Feature #2661: output the http-body-data to eve.json

Added by Hao Han almost 8 years ago. Updated 16 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Effort:
high
Difficulty:
Label:

Description

I have two requirements:
1. We do not need to output all the request or response body. Instead, only those text related body, e.g. html, json, txt, are required.
2. Output those http-body-data as a json field to eve.json or redis. We need to analyze the http headers and http body together.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #1005: conditional logging: controlling what gets loggedAssignedVictor JulienActions

AH Updated by Andreas Herz about 7 years ago Actions
Copy link
 #1

  • Assignee set to Community Ticket
  • Target version set to TBD

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #2

  • Related to Feature #1005: conditional logging: controlling what gets logged added

PA Updated by Philippe Antoine 16 days ago Actions
Copy link
 #3

  • Status changed from New to Feedback

Do you mean for regular http events as it is done for alerts now with

            # http-body: yes           # Requires metadata; enable dumping of HTTP body in Base64
            # http-body-printable: yes # Requires metadata; enable dumping of HTTP body in printable format

?

Actions
Copy link

Also available in: PDF Atom