Raw HTTP Headers
Andrew Klaus <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAGENE8sjSp5jhvgmmGD5Rny6XVc04A-85B5Da0owVL=sG50EDw@mail.gmail.com> |
Hello, I'd like to write a script for HTTP requests, but I need the raw and untruncated headers to do this. I can't seem to find an event that will give me this data to work with. I've looked at http_all_headers and http_header, but they still strip whitespace. Is there any (current) way of doing this? It'd be nice to be able to do this without having to modify the analyzer. Thanks! Andrew _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek