Project

General

Profile

Actions
Copy link

Feature #8516

open
JI OD

http: include server header in default eve record as a field

Feature #8516: http: include server header in default eve record as a field

Added by Jason Ish 3 days ago. Updated 1 day ago.

Status:
Triaged
Priority:
Normal
Assignee:
OISF Dev
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Currently, to get the server header field, you need to dump all headers and extract it from the array. As the server header is commonly used, it makes sense to hoist it up like the user-agent and content-type.

Related issues 2 (2 open — 0 closed)

Related to Suricata - Bug #6173: http: loss of backward compatibility in HTTP logs from v6 to v7NewOISF DevActions
Copied to Suricata - Feature #8520: quic: include server header in default eve record as a field FeedbackOISF DevActions

JI Updated by Jason Ish 3 days ago Actions
Copy link
 #1

  • Related to Bug #6173: http: loss of backward compatibility in HTTP logs from v6 to v7 added

PA Updated by Philippe Antoine 3 days ago Actions
Copy link
 #2

  • Status changed from New to Assigned
  • Target version changed from TBD to 9.0.0-beta1

JI Updated by Jason Ish 3 days ago Actions
Copy link
 #3

  • Copied to Feature #8520: quic: include server header in default eve record as a field added

PA Updated by Philippe Antoine 1 day ago Actions
Copy link
 #4

  • Status changed from Assigned to Triaged
Actions
Copy link

Also available in: PDF Atom