Actions
Feature #389
closed
MH
AS
http_header keyword support for responses
Feature #389:
http_header keyword support for responses
Effort:
Difficulty:
Label:
Description
Currently, Suricata only honors the http_header content modifier for HTTP requests. Please add support for HTTP responses so that response headers may also be efficiently inspected.
AS Updated by Anoop Saldanha over 14 years ago
- Assignee set to Anoop Saldanha
VJ Updated by Victor Julien about 14 years ago
- Status changed from New to Assigned
In addition, the same needs to be done for http_raw_header and the pcre /H flag.
VJ Updated by Victor Julien about 14 years ago
- Target version set to 1.2rc1
VJ Updated by Victor Julien about 14 years ago
- Status changed from Assigned to Closed
- % Done changed from 0 to 100
This is now supported in the current git master, with exception of the raw response header inspection. See #397.
Actions