Feature #389
closed
http_header keyword support for responses
Added by Martin Holste over 12 years ago.
Updated over 12 years ago.
Description
Currently, Suricata only honors the http_header content modifier for HTTP requests. Please add support for HTTP responses so that response headers may also be efficiently inspected.
- Assignee set to Anoop Saldanha
- Status changed from New to Assigned
In addition, the same needs to be done for http_raw_header and the pcre /H flag.
- Target version set to 1.2rc1
- Status changed from Assigned to Closed
- % Done changed from 0 to 100
This is now supported in the current git master, with exception of the raw response header inspection. See #397.
Also available in: Atom
PDF