[Bro] HTTP Content Disposition
seth at icir.org
Fri Oct 16 06:15:59 PDT 2015
> On Oct 16, 2015, at 3:44 AM, Albert Zaharovits <albert.zaharovits at gmail.com> wrote:
> I'm having an issue with the HTTP Content Dispositon header: the
> filename field of the HTTP::Info record doesn't get filed.
I just tested this and you’re right, the filename doesn’t show up in the http.log, that’s definitely a bug. It does at least show up in the files.log correctly.
I’ll file a ticket about that field missing in the http log. It looks like some of our http entity tracking might be a bit off.
International Computer Science Institute
(Bro) because everyone has a network
More information about the Bro