diff --git a/scripts/policy/frameworks/intel/seen/http-headers.bro b/scripts/policy/frameworks/intel/seen/http-headers.bro index c2e2160f57..3746ec9def 100644 --- a/scripts/policy/frameworks/intel/seen/http-headers.bro +++ b/scripts/policy/frameworks/intel/seen/http-headers.bro @@ -21,7 +21,6 @@ event http_header(c: connection, is_orig: bool, name: string, value: string) $where=HTTP::IN_HOST_HEADER]); break; - case "REFERER": Intel::seen([$indicator=sub(value, /^.*:\/\//, ""), $indicator_type=Intel::URL,