Project

General

Profile

Actions
Copy link

Optimization #4141

open

Task #4143: tracking: file.data improvements

file.data: inspect File objects for HTTP

Added by Victor Julien over 2 years ago. Updated about 1 month ago.

Status:
In Review
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

file.data for HTTP currently inspects the HtpBody instead of File(s). These will usually contain the same data, except for the multipart case.

Switching to File(s) would make the implementation simpler and make the implementation more correct.

David Wharton and Jae Williams have offered to run test runs for their rule collections to validate that this change won't break anything.

Related issues 1 (1 open — 0 closed)

Related to Task #4097: Suricon 2020 brainstormAssignedVictor JulienActions
Actions
Copy link
 #1

Updated by Victor Julien over 2 years ago

  • Related to Task #4097: Suricon 2020 brainstorm added
Actions
Copy link
 #2

Updated by Victor Julien over 2 years ago

  • Parent task set to #4143
Actions
Copy link
 #3

Updated by Victor Julien over 2 years ago

A possible optimization after this has been done, is that in most cases we might not need to track the HtpBody separately anymore.

Actions
Copy link
 #4

Updated by Victor Julien 7 months ago

  • Priority changed from Normal to High
  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1
Actions
Copy link
 #5

Updated by Victor Julien 4 months ago

  • Priority changed from High to Normal
  • Target version changed from 7.0.0-rc1 to 8.0.0-beta1
Actions
Copy link
 #6

Updated by Jeff Lucovsky about 1 month ago

  • Status changed from Assigned to In Review
Actions
Copy link

Also available in: Atom PDF