mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
36 lines
841 B
Text
36 lines
841 B
Text
# $Id: http-header.bro 7073 2010-09-13 00:45:02Z vern $
|
|
|
|
# Prints out detailed HTTP headers.
|
|
|
|
@load http
|
|
|
|
module HTTP;
|
|
|
|
export {
|
|
# The following lets you specify headers that you don't want
|
|
# to print out.
|
|
global skip_header: set[string] &redef;
|
|
|
|
# If you add anything to the following table, *only* the headers
|
|
# included will be recorded.
|
|
global include_header: set[string] &redef;
|
|
|
|
# For example:
|
|
# redef skip_header += { "COOKIE", "SET-COOKIE" };
|
|
# will refrain from printing cookies.
|
|
}
|
|
|
|
event http_header(c: connection, is_orig: bool, name: string, value: string)
|
|
{
|
|
if ( name in skip_header )
|
|
return;
|
|
|
|
if ( |include_header| > 0 && name !in include_header )
|
|
return;
|
|
|
|
local s = lookup_http_request_stream(c);
|
|
|
|
print http_log, fmt("%.6f %s %s %s: %s",
|
|
network_time(), s$id,
|
|
is_orig ? ">" : "<", name, value);
|
|
}
|