[Bro] HTTP Content Disposition

Seth Hall seth at icir.org
Fri Oct 16 06:15:59 PDT 2015

> On Oct 16, 2015, at 3:44 AM, Albert Zaharovits <albert.zaharovits at gmail.com> wrote:
> I'm having an issue with the HTTP Content Dispositon header: the 
> filename field of the HTTP::Info record doesn't get filed.

I just tested this and you’re right, the filename doesn’t show up in the http.log, that’s definitely a bug.  It does at least show up in the files.log correctly.

I’ll file a ticket about that field missing in the http log.  It looks like some of our http entity tracking might be a bit off.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list