Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 00:58:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

New script for logging header names and values.

Browse source 
- Closes #519.
This commit is contained in:
Seth Hall 2011-09-13 22:33:26 -04:00
parent af6c7c8b1a
commit f32b567c85
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/policy/protocols/http/headers.bro → scripts/policy/protocols/http/header-names.bro
View file

@ -1,4 +1,6 @@
##! Extract and include the header keys used for each request in the log. ##! Extract and include the header names used for each request in the HTTP
##! logging stream. The headers in the logging stream will be stored in the
##! same order which they were seen on the wire.
@load base/protocols/http/main @load base/protocols/http/main
@ -8,15 +10,13 @@ export {
redef record Info += { redef record Info += {
## The vector of HTTP headers. No header values are included here, just ## The vector of HTTP headers. No header values are included here, just
## the header names. ## the header names.
## TODO: with an empty vector as &default, the vector isn't coerced to the
## correct type.
headers: vector of string &log &optional; headers: vector of string &log &optional;
}; };
} }
event http_header(c: connection, is_orig: bool, name: string, value: string) &priority=4 event http_header(c: connection, is_orig: bool, name: string, value: string) &priority=3
{ {
if ( ! is_orig ) if ( ! is_orig || ! c?$http )
return; return;
if ( ! c$http?$headers ) if ( ! c$http?$headers )