[Bro-Dev] #354: Allow analyser to process partial HTTP connections.

Bro Tracker bro at tracker.icir.org
Wed Jan 19 08:25:26 PST 2011


#354: Allow analyser to process partial HTTP connections.
---------------------------+-----------------------------
 Reporter:  sridhar.basam  |       Type:  Feature Request
   Status:  new            |   Priority:  Normal
Milestone:                 |  Component:  Bro
  Version:                 |   Keywords:
---------------------------+-----------------------------
 By default the HTTP analyser doesn't process packets where bro did not see
 the initial handshake. I got a couple of 1 line patches from Vern to fix
 it. Can we roll this into a future release?

 Sridhar

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/354>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list