[Bro-Dev] #354: Allow analyser to process partial HTTP connections.

[Bro Tracker]

#354: Allow analyser to process partial HTTP connections.
------------------------------+-----------------
  Reporter:  sridhar.basam    |      Owner:
      Type:  Feature Request  |     Status:  new
  Priority:  Normal           |  Milestone:
 Component:  Bro              |    Version:
Resolution:                   |   Keywords:
------------------------------+-----------------

Old description:

> By default the HTTP analyser doesn't process packets where bro did not
> see the initial handshake. I got a couple of 1 line patches from Vern to
> fix it. Can we roll this into a future release?
>
> Sridhar

New description:

 By default the HTTP analyser doesn't process packets where bro did not see
 the initial handshake. I got a couple of 1 line patches from Vern to fix
 it. Can we roll this into a future release?

 Sridhar

--

Comment (by seth):

 This is a fairly large change in semantics for how Bro currently functions
 and I'm curious what your motivation for this change is.  Can you give an
 example of the conditions where this is causing a problem for you?

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/354#comment:1>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker