Project

General

Profile

Actions
Copy link

Feature #389

closed

http_header keyword support for responses

Added by Martin Holste over 12 years ago. Updated over 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anoop Saldanha
Target version:
1.2rc1
Effort:
Difficulty:
Label:

Description

Currently, Suricata only honors the http_header content modifier for HTTP requests. Please add support for HTTP responses so that response headers may also be efficiently inspected.

Actions
Copy link
 #1

Updated by Anoop Saldanha over 12 years ago

  • Assignee set to Anoop Saldanha
Actions
Copy link
 #2

Updated by Victor Julien over 12 years ago

  • Status changed from New to Assigned

In addition, the same needs to be done for http_raw_header and the pcre /H flag.

Actions
Copy link
 #3

Updated by Victor Julien over 12 years ago

  • Target version set to 1.2rc1
Actions
Copy link
 #4

Updated by Victor Julien over 12 years ago

  • Status changed from Assigned to Closed
  • % Done changed from 0 to 100

This is now supported in the current git master, with exception of the raw response header inspection. See #397.

Actions
Copy link

Also available in: Atom PDF