zeek/policy/protocols/http/var-extraction-uri.bro
Seth Hall cee3991822 Script updates.
- Fixing more vestiges from moving site.bro and removing functions.bro

- Updates comments on analysis-groups.bro

- Added the trim-trace-file script from broctl.
2011-07-19 10:41:54 -04:00

15 lines
379 B
Text

##! This script extracts and logs variables from the requested URI
@load protocols/http
module HTTP;
redef record Info += {
uri_vars: vector of string &optional &log;
};
event http_request(c: connection, method: string, original_URI: string,
unescaped_URI: string, version: string) &priority=2
{
c$http$uri_vars = extract_keys(original_URI, /&/);
}