[Bro-Dev] [JIRA] (BIT-781) Case sensitive (non-normalized) HTTP header names

Seth Hall (JIRA) jira at bro-tracker.atlassian.net
Thu Nov 7 08:33:31 PST 2013


    [ https://bro-tracker.atlassian.net/browse/BIT-781?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14630#comment-14630 ] 

Seth Hall commented on BIT-781:
-------------------------------

Well, looks like this didn't happen yet again.  We may end up just waiting on this until the HTTP binpac++ analyzer shows up in Bro.

> Case sensitive (non-normalized) HTTP header names
> -------------------------------------------------
>
>                 Key: BIT-781
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-781
>             Project: Bro Issue Tracker
>          Issue Type: New Feature
>          Components: Bro
>    Affects Versions: git/master
>            Reporter: sconzo
>              Labels: analyzer
>             Fix For: 2.3
>
>
> There are a lot of usecases to have access to the normalized HTTP header names, I'm asking for an extension that will allow access to the non-normalized version.  This can be used to find non-standard/suspicious HTTP connections.



--
This message was sent by Atlassian JIRA
(v6.2-OD-01#6204)


More information about the bro-dev mailing list