Raw HTTP Headers

Andrew Klaus <[email protected]>
Newsgroups gmane.comp.security.detection.bro
Message-ID <CAGENE8sjSp5jhvgmmGD5Rny6XVc04A-85B5Da0owVL=sG50EDw@mail.gmail.com>
Hello,

I'd like to write a script for HTTP requests, but I need the raw and
untruncated headers to do this. I can't seem to find an event that will
give me this data to work with. I've looked at http_all_headers and
http_header, but they still strip whitespace.

Is there any (current) way of doing this? It'd be nice to be able to do
this without having to modify the analyzer.

Thanks!
Andrew

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.