diff --git a/rust/htp/src/response.rs b/rust/htp/src/response.rs index cc9540b9f8..3cdb020b90 100644 --- a/rust/htp/src/response.rs +++ b/rust/htp/src/response.rs @@ -446,10 +446,14 @@ impl ConnectionParser { _ => { let response_tx = self.response_mut().unwrap(); if response_tx.seen_100continue { - htp_error!( + let mut flags = 0; // unused but needed by macro + htp_warn_once!( self.logger, HtpLogCode::CONTINUE_ALREADY_SEEN, - "Already seen 100-Continue." + "Already seen 100-Continue.", + self.response_mut().unwrap().flags, + flags, + HtpFlags::FIELD_100_CONTINUE ); } // Expecting to see another response line next. diff --git a/rust/htp/src/util.rs b/rust/htp/src/util.rs index ace65f6324..1ca6d81db1 100644 --- a/rust/htp/src/util.rs +++ b/rust/htp/src/util.rs @@ -143,6 +143,8 @@ impl HtpFlags { pub const RESPONSE_MISSING_BYTES: u64 = (0x0020_0000_0000 | Self::MISSING_BYTES); /// Too many headers, log only once. pub const HEADERS_TOO_MANY: u64 = 0x0040_0000_0000; + /// 100-Continue already seen. + pub const FIELD_100_CONTINUE: u64 = 0x0080_0000_0000; } #[allow(clippy::upper_case_acronyms)]