Project

General

Profile

Actions
Copy link

Documentation #5485

closed
JF JT

Documentation #5182: userguide: better document rule keywords

userguide: explain that the http.header_names buffer is normalized

Documentation #5485: userguide: explain that the http.header_names buffer is normalized

Added by Juliana Fajardini Reichow over 3 years ago. Updated 11 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Taylor
Target version:
8.0.0-rc1
Affected Versions:
Effort:
Difficulty:
Label:

Description

libhtp normalizes the http.header_names buffer, as it resides in a structure that does not allow duplicates.

As someone inspecting Wireshark packet traffic may be expecting something different when writing a rule, make this behavior clear on our documentation.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #6779: http.header_names behavior when encountering duplicate header namesNewOISF DevActions

JF Updated by Juliana Fajardini Reichow over 3 years ago Actions
Copy link
 #1

  • Parent task set to #5182

JF Updated by Juliana Fajardini Reichow over 3 years ago Actions
Copy link
 #2

  • Subject changed from userguide: explain that the http.header_names is normalized to userguide: explain that the http.header_names buffer is normalized

JT Updated by Jason Taylor about 2 years ago Actions
Copy link
 #3

  • Assignee changed from OISF Dev to Jason Taylor

This will be/is resolved with the work being done on ticket #3025

BM Updated by Brandon Murphy about 2 years ago Actions
Copy link
 #4

looks like #6779 might be a duplicate of this.

JF Updated by Juliana Fajardini Reichow about 2 years ago Actions
Copy link
 #5

  • Related to Feature #6779: http.header_names behavior when encountering duplicate header names added

JT Updated by Jason Taylor almost 2 years ago Actions
Copy link
 #6

  • Status changed from New to Assigned

JF Updated by Juliana Fajardini Reichow almost 2 years ago Actions
Copy link
 #7

  • Target version changed from TBD to 8.0.0-beta1

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #8

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

JT Updated by Jason Taylor 11 months ago Actions
Copy link
 #10

  • Status changed from Assigned to In Progress

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #11

  • Status changed from In Progress to In Review

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #12

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: PDF Atom