[Bro-Dev] #339: Tweaking HTTP Analyzer to be able to parse some weird HTTP connections

[Bro Tracker]

#339: Tweaking HTTP Analyzer to be able to parse some weird HTTP connections
--------------------+------------------------
 Reporter:  gregor  |      Owner:
     Type:  Patch   |     Status:  new
 Priority:  Normal  |  Milestone:
Component:  Bro     |    Version:  git/master
 Keywords:          |
--------------------+------------------------
 {{{
 #!rst

 * Fixing a couple of minor issues in the HTTP analyzer, that made the
   analyzer raise a ProtocolViolation() on strange but seemingly legal
   HTTP traffic. Well, the traffic might not necessarily be adhering the
   RFC, but the server has understood it.

 * Also stops parsing when the message is interrupted to prevent further
   parsing and ProtocolViolation() generation.

 * skip_http_entity_data: check return value of  FindAnalyzer, since it
   can be NULL

 }}}

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/339>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker