[Bro-Dev] [JIRA] (BIT-781) Case sensitive (non-normalized) HTTP header names
Seth Hall (JIRA)
jira at bro-tracker.atlassian.net
Thu Nov 7 08:33:31 PST 2013
[ https://bro-tracker.atlassian.net/browse/BIT-781?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14630#comment-14630 ]
Seth Hall commented on BIT-781:
-------------------------------
Well, looks like this didn't happen yet again. We may end up just waiting on this until the HTTP binpac++ analyzer shows up in Bro.
> Case sensitive (non-normalized) HTTP header names
> -------------------------------------------------
>
> Key: BIT-781
> URL: https://bro-tracker.atlassian.net/browse/BIT-781
> Project: Bro Issue Tracker
> Issue Type: New Feature
> Components: Bro
> Affects Versions: git/master
> Reporter: sconzo
> Labels: analyzer
> Fix For: 2.3
>
>
> There are a lot of usecases to have access to the normalized HTTP header names, I'm asking for an extension that will allow access to the non-normalized version. This can be used to find non-standard/suspicious HTTP connections.
--
This message was sent by Atlassian JIRA
(v6.2-OD-01#6204)
More information about the bro-dev
mailing list