diff --git a/src/analyzer/protocol/http/HTTP.cc b/src/analyzer/protocol/http/HTTP.cc index 863c65ad02..4a0fd83201 100644 --- a/src/analyzer/protocol/http/HTTP.cc +++ b/src/analyzer/protocol/http/HTTP.cc @@ -69,6 +69,12 @@ void HTTP_Entity::EndOfData() { encoding = IDENTITY; } + zeek::detail::Rule::PatternType rule = + http_message->IsOrig() ? zeek::detail::Rule::HTTP_REQUEST_BODY : zeek::detail::Rule::HTTP_REPLY_BODY; + + http_message->MyHTTP_Analyzer()->Conn()->Match(rule, reinterpret_cast(""), 0, + http_message->IsOrig(), false, true, false); + if ( body_length ) http_message->MyHTTP_Analyzer()->ForwardEndOfData(http_message->IsOrig());