Open Information Security Foundation

05/24/2013

03:40 PM Suricata Feature #602: availability for http.log output - identical to apache log format

New pull request adding syntax error handling.
https://github.com/inliniac/suricata/pull/377
Ignacio Sanchez

05/15/2013

01:58 PM Suricata Feature #602: availability for http.log output - identical to apache log format

I have submitted a new pull request with the following changes:
Cookie is parsed now using uint8_t pointers (follo... Ignacio Sanchez

02/13/2013

04:35 PM Suricata Feature #602: availability for http.log output - identical to apache log format

Yes, this is precisely what it has been added in the above mentioned PR (in addition to some bug fixes and the Charle... Ignacio Sanchez

03:33 PM Suricata Feature #602: availability for http.log output - identical to apache log format

Ok. I have sent a pull request with the following changes:
Added support for %{cookiename}C
Added support for the... Ignacio Sanchez

10/18/2012

03:10 PM Suricata Feature #602: availability for http.log output - identical to apache log format

Hi,
Yes, but there is no pcap file.
With a pcap file the testing process is easier for me. I run suricata again... Ignacio Sanchez

10/16/2012

12:56 PM Suricata Bug #600: literal \t (x09) in mod_log_config

> I think we can easily add another print function to create the format of mod_log_config. Ignacio, are you intereste... Ignacio Sanchez

12:41 PM Suricata Feature #602: availability for http.log output - identical to apache log format

OK. It will involve changing the meaning of some of the current format strings such as %u (which in suricata means UR... Ignacio Sanchez

10/13/2012

03:52 PM Suricata Bug #600: literal \t (x09) in mod_log_config

I have updated the custom http logging wiki page.
https://redmine.openinfosecfoundation.org/projects/suricata/wiki... Ignacio Sanchez

10/12/2012

04:18 AM Suricata Bug #600: literal \t (x09) in mod_log_config

As I said I never meant at this point to allow the production of an output *identical* to the one of mod_log_config..... Ignacio Sanchez

03:36 AM Suricata Bug #600: literal \t (x09) in mod_log_config

The special characters are escaped by the libhtp library. I understand that Apache mod_log_config behaves slightly di... Ignacio Sanchez