[Bro] HTTP Content Disposition

[Seth Hall]

> On Oct 16, 2015, at 3:44 AM, Albert Zaharovits <albert.zaharovits at gmail.com> wrote:
> 
> I'm having an issue with the HTTP Content Dispositon header: the 
> filename field of the HTTP::Info record doesn't get filed.

I just tested this and you’re right, the filename doesn’t show up in the http.log, that’s definitely a bug.  It does at least show up in the files.log correctly.

I’ll file a ticket about that field missing in the http log.  It looks like some of our http entity tracking might be a bit off.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/