Project

General

Profile

Actions

Feature #389

closed
MH AS

http_header keyword support for responses

Feature #389: http_header keyword support for responses

Added by Martin Holste over 14 years ago. Updated about 14 years ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Currently, Suricata only honors the http_header content modifier for HTTP requests. Please add support for HTTP responses so that response headers may also be efficiently inspected.

AS Updated by Anoop Saldanha over 14 years ago Actions #1

  • Assignee set to Anoop Saldanha

VJ Updated by Victor Julien about 14 years ago Actions #2

  • Status changed from New to Assigned

In addition, the same needs to be done for http_raw_header and the pcre /H flag.

VJ Updated by Victor Julien about 14 years ago Actions #3

  • Target version set to 1.2rc1

VJ Updated by Victor Julien about 14 years ago Actions #4

  • Status changed from Assigned to Closed
  • % Done changed from 0 to 100

This is now supported in the current git master, with exception of the raw response header inspection. See #397.

Actions

Also available in: PDF Atom