[Bro] Extracting content types of the HTTP responses
pachinko.tw at gmail.com
Sun Oct 21 18:37:46 PDT 2012
Recently, we analyze the content types of the HTTP responses
in some traces. We find some content types are not accurately recorded
in the http.log. The attached PCAP file is an example. In the file, the
Bro (ver. 2.1) simply records "text/plain" for the response in the http.log.
Please suggest how we can make Bro record the accurate content type in
the log. Many thanks.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 3179 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20121022/ce10bd5f/attachment.obj
More information about the Bro