Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 03:28:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fixed a bug with detecting webapps.

Browse source
This commit is contained in:
Seth Hall 2011-06-07 17:03:32 -04:00
parent 0de6393c6f
commit 8a0e14f0dc
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
policy/protocols/http/detect-webapps.bro
View file

@ -38,11 +38,14 @@ event signature_match(state: signature_state, msg: string, data: string) &priori
# If the new url is a substring of an existing, known url then let's
# use that as the new url for the software.
# PROBLEM: different version of the same software on the same server with a shared root path
local is_substring = strstr(Software::tracked[c$id$resp_h][si$name]$url, si$url);
local is_substring = 0;
if ( Software::tracked[c$id$resp_h][si$name]?$url )
is_substring = strstr(Software::tracked[c$id$resp_h][si$name]$url, si$url);
if ( is_substring == 1 )
{
Software::tracked[c$id$resp_h][si$name]$url = si$url;
# Force the software to be logged because it indicates a URL
# Force the software to be logged because it indicates a URL
# closer to the root of the site.
si$force_log = T;
}