HTTP methods

Vern Paxson vern at icir.org
Sun Jan 5 23:27:49 PST 2003


> I can see that Bro supports HTTP methods - GET, HEAD and POST.
> But in between i see entries in weird.log saying -
> 1041827706.208639 128.61.74.29/2254 > *.*.*.*/http: HTTP_unknown_method
> 
> I am using bro 0.7a90 and was wondering if analysis of other methods are 
> being done
> with latest version ...?

There's no analysis of additional methods in 0.8, but it knows about
(= won't complain about) the following additional methods:

	"OPTIONS", "PUT", "DELETE", "TRACE", "CONNECT",
	"PROPFIND", "PROPPATCH", "MKCOL", "DELETE", "PUT",
	"COPY", "MOVE", "LOCK", "UNLOCK",

- Vern



More information about the Bro mailing list