From 5f2cb840d7e7d01327a390771a3738db9cde1acb Mon Sep 17 00:00:00 2001
From: Liang Zhu <liangzhu@icsi.berkeley.edu>
Date: Mon, 20 Jul 2015 16:55:19 -0700
Subject: [PATCH] add user_agent to ocsp-to-match log

---
 scripts/policy/protocols/ssl/ocsp-ssl-split.bro | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/scripts/policy/protocols/ssl/ocsp-ssl-split.bro b/scripts/policy/protocols/ssl/ocsp-ssl-split.bro
index e8318e145e..38587496a4 100644
--- a/scripts/policy/protocols/ssl/ocsp-ssl-split.bro
+++ b/scripts/policy/protocols/ssl/ocsp-ssl-split.bro
@@ -82,6 +82,9 @@ export {
 
 		## host in HTTP request
 		host:           string     &log       &optional;
+
+		## user_agent
+		user_agent:     string     &log       &optional;
 		};
 
 	type Issuer_Name_Type: record {
@@ -348,6 +351,9 @@ function update_http_info(ocsp: OCSP_SSL_SPLIT::Info_OCSP, http: HTTP::Info)
 	if ( http?$method )
 		ocsp$method = http$method;
 
+	if ( http?$user_agent )
+		ocsp$user_agent = http$user_agent;
+
 	if ( http?$original_uri )
 		ocsp$original_uri = http$original_uri;