mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
47500ceef4
Fixed most @load dependency issues in the process. The test is still failing in a "known" way due to hot.conn.bro and scan.bro. Adressess #545
40 lines
958 B
Text
40 lines
958 B
Text
##! Utilities specific for HTTP processing.
|
|
|
|
@load ./main
|
|
|
|
module HTTP;
|
|
|
|
export {
|
|
global extract_keys: function(data: string, kv_splitter: pattern): string_vec;
|
|
global build_url: function(rec: Info): string;
|
|
global build_url_http: function(rec: Info): string;
|
|
}
|
|
|
|
|
|
function extract_keys(data: string, kv_splitter: pattern): string_vec
|
|
{
|
|
local key_vec: vector of string = vector();
|
|
|
|
local parts = split(data, kv_splitter);
|
|
for ( part_index in parts )
|
|
{
|
|
local key_val = split1(parts[part_index], /=/);
|
|
if ( 1 in key_val )
|
|
key_vec[|key_vec|] = key_val[1];
|
|
}
|
|
return key_vec;
|
|
}
|
|
|
|
function build_url(rec: Info): string
|
|
{
|
|
local uri = rec?$uri ? rec$uri : "/<missed_request>";
|
|
local host = rec?$host ? rec$host : fmt("%s", rec$id$resp_h);
|
|
if ( rec$id$resp_p != 80/tcp )
|
|
host = fmt("%s:%s", host, rec$id$resp_p);
|
|
return fmt("%s%s", host, uri);
|
|
}
|
|
|
|
function build_url_http(rec: Info): string
|
|
{
|
|
return fmt("http://%s", build_url(rec));
|
|
}
|