|
|
|
@ -386,14 +386,16 @@ void DetectHttpHeaderRegister(void)
|
|
|
|
sigmatch_table[DETECT_HTTP_HEADER].flags |= SIGMATCH_NOOPT;
|
|
|
|
sigmatch_table[DETECT_HTTP_HEADER].flags |= SIGMATCH_NOOPT;
|
|
|
|
sigmatch_table[DETECT_HTTP_HEADER].flags |= SIGMATCH_INFO_STICKY_BUFFER;
|
|
|
|
sigmatch_table[DETECT_HTTP_HEADER].flags |= SIGMATCH_INFO_STICKY_BUFFER;
|
|
|
|
|
|
|
|
|
|
|
|
DetectAppLayerInspectEngineRegister("http_header", ALPROTO_HTTP1, SIG_FLAG_TOSERVER,
|
|
|
|
DetectAppLayerInspectEngineRegister2("http_header", ALPROTO_HTTP1, SIG_FLAG_TOSERVER,
|
|
|
|
HTP_REQUEST_PROGRESS_HEADERS, DetectEngineInspectBufferGeneric, GetData1);
|
|
|
|
HTP_REQUEST_PROGRESS_HEADERS, HTP_REQUEST_PROGRESS_TRAILER,
|
|
|
|
|
|
|
|
DetectEngineInspectBufferGeneric, GetData1);
|
|
|
|
DetectAppLayerMpmRegister("http_header", SIG_FLAG_TOSERVER, 2,
|
|
|
|
DetectAppLayerMpmRegister("http_header", SIG_FLAG_TOSERVER, 2,
|
|
|
|
PrefilterMpmHttpHeaderRequestRegister, NULL, ALPROTO_HTTP1,
|
|
|
|
PrefilterMpmHttpHeaderRequestRegister, NULL, ALPROTO_HTTP1,
|
|
|
|
0); /* not used, registered twice: HEADERS/TRAILER */
|
|
|
|
0); /* not used, registered twice: HEADERS/TRAILER */
|
|
|
|
|
|
|
|
|
|
|
|
DetectAppLayerInspectEngineRegister("http_header", ALPROTO_HTTP1, SIG_FLAG_TOCLIENT,
|
|
|
|
DetectAppLayerInspectEngineRegister2("http_header", ALPROTO_HTTP1, SIG_FLAG_TOCLIENT,
|
|
|
|
HTP_RESPONSE_PROGRESS_HEADERS, DetectEngineInspectBufferGeneric, GetData1);
|
|
|
|
HTP_RESPONSE_PROGRESS_HEADERS, HTP_RESPONSE_PROGRESS_TRAILER,
|
|
|
|
|
|
|
|
DetectEngineInspectBufferGeneric, GetData1);
|
|
|
|
DetectAppLayerMpmRegister("http_header", SIG_FLAG_TOCLIENT, 2,
|
|
|
|
DetectAppLayerMpmRegister("http_header", SIG_FLAG_TOCLIENT, 2,
|
|
|
|
PrefilterMpmHttpHeaderResponseRegister, NULL, ALPROTO_HTTP1,
|
|
|
|
PrefilterMpmHttpHeaderResponseRegister, NULL, ALPROTO_HTTP1,
|
|
|
|
0); /* not used, registered twice: HEADERS/TRAILER */
|
|
|
|
0); /* not used, registered twice: HEADERS/TRAILER */
|
|
|
|
|