Open Information Security Foundation

03/13/2019

08:02 PM Suricata Bug #2881: http.protocol parsing inaccuracy : accept spaces in URI

Conversely, the http.url field is only matching up until the first space resulting in something like:
@"http":{"ur... chris lujan

07:59 PM Suricata Bug #2881 (Closed): http.protocol parsing inaccuracy : accept spaces in URI

Request:
@
GET /uid=0(root) gid=0(root) groups=0(root)asdf HTTP/1.1
User-Agent: curl/7.29.0
Accept: */*@
eve.... chris lujan

06/18/2018

05:15 PM Suricata Feature #2519 (New): XFF iprep support

I have made many attempts and I am fairly confident that when xff is enabled (in overwrite mode), iprep is not applie... chris lujan