zeek/testing/btest/scripts/base
Johanna Amann eab80c8834 HTTP: Recognize and skip upgrade/websocket connections.
This adds a slight patch to the HTTP analyzer, which recognizez when a connection is
upgraded to a different protocol (using a 101 reply with a few specific headers being
set).

In this case, the analyzer stops further processing of the connection (which will
result in DPD errors) and raises a new event:

event http_connection_upgrade(c: connection, protocol: string);

Protocol contains the name of the protocol that is being upgraded to, as specified in
one of the header values.
2017-08-04 07:04:28 -07:00
..
files Extend file extraction log. 2017-01-25 01:16:46 -05:00
frameworks Add canonifier to catch and release test that should fix test failures. 2017-07-28 09:40:58 -07:00
misc Fix at_least in Version.bro. 2017-06-05 15:16:41 -07:00
protocols HTTP: Recognize and skip upgrade/websocket connections. 2017-08-04 07:04:28 -07:00
utils Fix to_json() to not lose precision for values of type double 2017-02-02 13:03:05 -06:00