Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 08:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Revert "Expanding the HTTP methods used in the signature to detect HTTP traffic."

Browse source 
This reverts commit 506b26e5ff.

The corresponding patch adding HTTP CONNECT support doesn't work yet
so backing this out until we get that in shape.
This commit is contained in:
Robin Sommer 2014-02-13 12:45:51 -08:00
parent a57f0ef9a0
commit eb744fd329
1 changed files with 1 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scripts/base/protocols/http/dpd.sig
View file

@ -1,8 +1,6 @@
# List of HTTP headers pulled from:
# http://annevankesteren.nl/2007/10/http-methods
signature dpd_http_client { signature dpd_http_client {
ip-proto == tcp ip-proto == tcp
payload /^[[:space:]]*(OPTIONS|GET|HEAD|POST|PUT|DELETE|TRACE|CONNECT|PROPFIND|PROPPATCH|MKCOL|COPY|MOVE|LOCK|UNLOCK|VERSION-CONTROL|REPORT|CHECKOUT|CHECKIN|UNCHECKOUT|MKWORKSPACE|UPDATE|LABEL|MERGE|BASELINE-CONTROL|MKACTIVITY|ORDERPATCH|ACL|PATCH|SEARCH|BCOPY|BDELETE|BMOVE|BPROPFIND|BPROPPATCH|NOTIFY|POLL|SUBSCRIBE|UNSUBSCRIBE|X-MS-ENUMATTS|RPC_OUT_DATA|RPC_IN_DATA)[[:space:]]*/ payload /^[[:space:]]*(GET|HEAD|POST)[[:space:]]*/
tcp-state originator tcp-state originator
} }
@ -13,5 +11,3 @@ signature dpd_http_server {
requires-reverse-signature dpd_http_client requires-reverse-signature dpd_http_client
enable "http" enable "http"
} }