[Bro] HTTP Content Disposition

Albert Zaharovits albert.zaharovits at gmail.com
Fri Oct 16 00:44:20 PDT 2015


Hi there,

I'm having an issue with the HTTP Content Dispositon header: the 
filename field of the HTTP::Info record doesn't get filed.

Event **event http_header(c: connection, is_orig: bool, name: string, 
value: string)** gets the header, but filename is empty in **event 
HTTP::log_http(rec: HTTP::Info)**.

I'm testing with:
```bash
curl -i 
'http://httpbin.org/response-headers?Content-Type=application/octet-stream;%20charset=UTF-8&Content-Disposition=attachment;%20filename%3d%22test.json%22'
```

What say you?

Thanks,
Albert


More information about the Bro mailing list