zeek/scripts/base/protocols/http
Robin Sommer 0af57d12b2 Change HTTP's DPD signatures so that each side can trigger the analyzer on its own.
This is to avoid missing large sessions where a single side exceeds
the DPD buffer size. It comes with the trade-off that now the analyzer
can be triggered by anybody controlling one of the endpoints (instead
of both).

Test suite changes are minor, and nothing in "external".

Closes #343.
2020-09-08 07:33:36 +00:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
dpd.sig Change HTTP's DPD signatures so that each side can trigger the analyzer on its own. 2020-09-08 07:33:36 +00:00
entities.zeek GH-234: rename Broxygen to Zeexygen along with roles/directives 2019-04-22 19:45:50 -07:00
files.zeek Merge remote-tracking branch 'origin/topic/seth/zeek_init' 2019-04-19 11:24:29 -07:00
main.zeek GH-646: add new "successful_connection_remove" event 2019-11-11 19:52:59 -08:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
utils.zeek Merge branch 'Fix_http_build_url' of ssh://github.com/Olerdrive/zeek 2019-10-28 09:32:32 +00:00

Support for Hypertext Transfer Protocol (HTTP) analysis.