Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

BIT-1077: fix HTTP::log_server_header_names.

Browse source 
Before, it just re-logged fields from the client side.
This commit is contained in:
Jon Siwek 2015-03-16 15:12:48 -05:00
parent 5e2defebe5
commit c09411bc8b
3 changed files with 44 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

27
scripts/policy/protocols/http/header-names.bro
View file

@ -26,20 +26,25 @@ export {
event http_header(c: connection, is_orig: bool, name: string, value: string) &priority=3
{
if ( ! is_orig || ! c?$http )
if ( ! c?$http )
return;
if ( log_client_header_names )
if ( is_orig )
{
if ( ! c$http?$client_header_names )
c$http$client_header_names = vector();
c$http$client_header_names[|c$http$client_header_names|] = name;
if ( log_client_header_names )
{
if ( ! c$http?$client_header_names )
c$http$client_header_names = vector();
c$http$client_header_names[|c$http$client_header_names|] = name;
}
}
if ( log_server_header_names )
else
{
if ( ! c$http?$server_header_names )
c$http$server_header_names = vector();
c$http$server_header_names[|c$http$server_header_names|] = name;
if ( log_server_header_names )
{
if ( ! c$http?$server_header_names )
c$http$server_header_names = vector();
c$http$server_header_names[|c$http$server_header_names|] = name;
}
}
}