Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Make HTTP 206 reassembly require ETags by default.

Browse source
This commit is contained in:
Seth Hall 2015-04-09 23:58:46 -04:00
parent e8c87e19bd
commit 0ee7d82e19
2 changed files with 17 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/protocols/http/files.bro
View file

@ -19,12 +19,12 @@ function get_file_handle(c: connection, is_orig: bool): string
if ( ! c?$http )
return "";
if ( c$http$range_request && ! is_orig )
if ( c$http$range_request && c$http?$etag && ! is_orig )
{
# Any multipart responses from the server are pieces of same file
# that correspond to range requests, so don't use mime depth to
# identify the file.
return cat(Analyzer::ANALYZER_HTTP, is_orig, c$id$orig_h, build_url(c$http));
return cat(Analyzer::ANALYZER_HTTP, is_orig, c$id$orig_h, build_url(c$http), c$http$etag);
}
else
{