Ticket #781 (new Feature Request)

Opened 3 months ago

Last modified 2 months ago

Case sensitive (non-normalized) HTTP header names

Reported by: sconzo Owned by:
Priority: Normal Milestone: Bro2.1
Component: Bro Version: git/master
Keywords: Cc:

Description

There are a lot of usecases to have access to the normalized HTTP header names, I'm asking for an extension that will allow access to the non-normalized version. This can be used to find non-standard/suspicious HTTP connections.

Change History

comment:1 Changed 2 months ago by seth

  • Milestone set to Bro2.1

Let's look into doing this along with the other http analyzer changes for 2.1

Note: See TracTickets for help on using tickets.