Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/scripts/base/protocols/http
History
Arne Welzel 38e226bf75 http: Prevent script errors when http$current_entity is not set 
The current_entity tracking in HTTP assumes that client/server never
send HTTP entities at the same time. The attached pcap (generated
artificially) violates this and triggers:

    1663698249.307259 expression error in <...>base/protocols/http/./entities.zeek, line 89: field value missing (HTTP::c$http$current_entity)

For the http-no-crlf test, include weird.log as baseline. Now that weird is
@load'ed from http, it is actually created and seems to make sense
to btest-diff it, too.
2022-09-26 10:18:24 +02:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
dpd.sig Change HTTP's DPD signatures so that each side can trigger the analyzer on its own. 2020-09-08 07:33:36 +00:00
entities.zeek http: Prevent script errors when http$current_entity is not set 2022-09-26 10:18:24 +02:00
files.zeek Merge remote-tracking branch 'origin/topic/seth/zeek_init' 2019-04-19 11:24:29 -07:00
main.zeek Correct origin documentation of the version field in the HTTP log. 2022-04-04 14:22:58 -07:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
utils.zeek Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00

README 

Support for Hypertext Transfer Protocol (HTTP) analysis.