[Bro-Dev] #411: Non-binpac HTTP analyzer fails on 1xx response codes

Bro Tracker bro at tracker.bro-ids.org
Mon Sep 26 15:51:38 PDT 2011


#411: Non-binpac HTTP analyzer fails on 1xx response codes
----------------------+--------------------
  Reporter:  seth     |      Owner:
      Type:  Problem  |     Status:  new
  Priority:  High     |  Milestone:  Bro1.6
 Component:  Bro      |    Version:
Resolution:           |   Keywords:
----------------------+--------------------

Comment (by jsiwek):

 In [64e821624b34dcb886599a5e478f0a386f26e569/bro]:
 {{{
 #!CommitTicketReference repository="bro"
 revision="64e821624b34dcb886599a5e478f0a386f26e569"
 Fix handling of HTTP 1xx response codes (addresses #411).

 Changed the parser to not treat 1xx response codes as a final answer
 to an unanswered request -- a later response is still expected.

 The scripting layer will also not finish a request-reply pair when
 seeing 1xx's, instead it logs both the 1xx and final response messages
 with associated information of the current request as they're seen.
 }}}

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/411#comment:8>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list