detect: use http.connection to client

Ticket: #5746

doc/userguide/rules/http-keywords.rst

@@ -42,7 +42,7 @@ http.accept                    http_accept (*)          Request
 http.accept_lang               http_accept_lang (*)     Request
 http.accept_enc                http_accept_enc (*)      Request
 http.referer                   http_referer (*)         Request
-http.connection                http_connection (*)      Request
+http.connection                http_connection (*)      Both
 file.data                      file_data (*)            Both
 http.content_type              http_content_type (*)    Both
 http.content_len               http_content_len (*)     Both

src/detect-http-connection.c

@@ -38,6 +38,7 @@
 #define HEADER_NAME "Connection"
 #define KEYWORD_ID DETECT_AL_HTTP_HEADER_CONNECTION
 #define KEYWORD_TOSERVER 1
+#define KEYWORD_TOCLIENT    1
 
 #include "detect-http-headers-stub.h"
 #include "detect-http-connection.h"