[Bro-Dev] [JIRA] (BIT-939) HTTP parser refact & redesign required

Seth Hall (JIRA) jira at bro-tracker.atlassian.net
Fri Sep 4 06:24:00 PDT 2015

     [ https://bro-tracker.atlassian.net/browse/BIT-939?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Seth Hall updated BIT-939:
    Resolution: Incomplete
        Status: Closed  (was: Open)

This ticket is old and unfortunately light on details.  If you have more details (packets captures, specific places where things are failing, etc) that would be helpful and we could reopen this ticket.

> HTTP parser refact & redesign required
> --------------------------------------
>                 Key: BIT-939
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-939
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: git/master
>            Reporter: drmckay
>             Fix For: 2.5
> Hi,
> In the HTTP parser implementation you following an old, obsoleted rfc from 1999. There is a newer version: http://tools.ietf.org/html/rfc3986
> Please, review and refact your code (unescapeURI() redesign also needed, to minimalize false positives).
> Thanks.

This message was sent by Atlassian JIRA

More information about the bro-dev mailing list