mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
eab80c8834
This adds a slight patch to the HTTP analyzer, which recognizez when a connection is upgraded to a different protocol (using a 101 reply with a few specific headers being set). In this case, the analyzer stops further processing of the connection (which will result in DPD errors) and raises a new event: event http_connection_upgrade(c: connection, protocol: string); Protocol contains the name of the protocol that is being upgraded to, as specified in one of the header values. |
||
|---|---|---|
| .. | ||
| 100-continue.bro | ||
| 101-switching-protocols.bro | ||
| content-range-gap-skip.bro | ||
| content-range-gap.bro | ||
| entity-gap.bro | ||
| entity-gap2.bro | ||
| http-bad-request-with-version.bro | ||
| http-connect-with-header.bro | ||
| http-connect.bro | ||
| http-filename.bro | ||
| http-header-crlf.bro | ||
| http-methods.bro | ||
| http-pipelining.bro | ||
| missing-zlib-header.bro | ||
| multipart-extract.bro | ||
| no-uri.bro | ||
| no-version.bro | ||
| percent-end-of-line.bro | ||
| zero-length-bodies-with-drops.bro | ||