Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/testing/btest/Baseline/scripts.base.protocols.http.101-switching-protocols
History
Johanna Amann eab80c8834 HTTP: Recognize and skip upgrade/websocket connections. 
This adds a slight patch to the HTTP analyzer, which recognizez when a connection is
upgraded to a different protocol (using a 101 reply with a few specific headers being
set).

In this case, the analyzer stops further processing of the connection (which will
result in DPD errors) and raises a new event:

event http_connection_upgrade(c: connection, protocol: string);

Protocol contains the name of the protocol that is being upgraded to, as specified in
one of the header values.
2017-08-04 07:04:28 -07:00
..
.stdout HTTP: Recognize and skip upgrade/websocket connections. 2017-08-04 07:04:28 -07:00
http.log HTTP: Recognize and skip upgrade/websocket connections. 2017-08-04 07:04:28 -07:00