Actions
Documentation #5485
openDocumentation #5182: userguide: better document rule keywords
userguide: explain that the http.header_names buffer is normalized
Affected Versions:
Effort:
Difficulty:
Label:
Description
libhtp normalizes the http.header_names buffer, as it resides in a structure that does not allow duplicates.
As someone inspecting Wireshark packet traffic may be expecting something different when writing a rule, make this behavior clear on our documentation.
Updated by Juliana Fajardini Reichow 10 months ago
- Subject changed from userguide: explain that the http.header_names is normalized to userguide: explain that the http.header_names buffer is normalized
Actions