Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								334b1382e0 
								
							
								 
							
						 
						
							
							
								
								http: : fix int warnings  
							
							 
							
							... 
							
							
							
							Explicitly truncate file names to UINT16_MAX
Before, they got implicitly truncated, meaning a UINT16_MAX + 1
file name, went to 0 file name (because of modulo 65536) 
							
						 
						
							4 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								e82416a415 
								
							
								 
							
						 
						
							
							
								
								http/range: reassemble files from different flows with range  
							
							 
							
							... 
							
							
							
							adds a container, ie a thread safe hash table whose
key is the filename
keep a tree of unordered ranges, up to a memcap limit
adds HTPFileOpenWithRange to handle like HTPFileOpen
if there is a range : open 2 files, one for the whole reassembled,
and one only for the current range 
							
						 
						
							4 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								053c728871 
								
							
								 
							
						 
						
							
							
								
								http: adds debug check against too many warnings  
							
							 
							
							
							
						 
						
							6 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								af4f816204 
								
							
								 
							
						 
						
							
							
								
								http: sets compression bomb limit  
							
							 
							
							
							
						 
						
							6 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								9cbf9ef7a4 
								
							
								 
							
						 
						
							
							
								
								HTTP new parser warning for Ambiguous C-L  
							
							 
							
							
							
						 
						
							6 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								c9c23d5cda 
								
							
								 
							
						 
						
							
							
								
								htp: set lzma memlimit from config  
							
							 
							
							
							
						 
						
							6 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								b5f3e03209 
								
							
								 
							
						 
						
							
							
								
								New app layer event for invalid http request line  
							
							 
							
							... 
							
							
							
							Handles logs from libhtp even if case of error 
							
						 
						
							7 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								8a339e73d3 
								
							
								 
							
						 
						
							
							
								
								http: adds an event for double encoded uri  
							
							 
							
							
							
						 
						
							7 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								3e12066819 
								
							
								 
							
						 
						
							
							
								
								http: adds events for each libhtp log  
							
							 
							
							... 
							
							
							
							Fixes  #997  
							
						 
						
							7 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								b6b7778e2d 
								
							
								 
							
						 
						
							
							
								
								http: adds event for header repetition  
							
							 
							
							
							
						 
						
							7 years ago  
						
					 
				
					
						
							
							
								 
								Philippe Antoine
							
						 
						
							 
							
							
							
								
							
								a1c6e091ac 
								
							
								 
							
						 
						
							
							
								
								http: new event for auth unrecognized  
							
							 
							
							... 
							
							
							
							activates libhtp auth parsing
Fixes  #984  
							
						 
						
							7 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								d0cded2523 
								
							
								 
							
						 
						
							
							
								
								http: set events for too many layers of compression  
							
							 
							
							... 
							
							
							
							libhtp would already issue warnings, but these were not mapped
to events yet. 
							
						 
						
							7 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								52195a4192 
								
							
								 
							
						 
						
							
							
								
								http: add event for leading spaces on request line  
							
							 
							
							... 
							
							
							
							Libhtp will issue a warning in this case, so we can match on this.
This patch adds event, rule and unittest. 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								e78e33a428 
								
							
								 
							
						 
						
							
							
								
								http: add event for suspicious method delimeter  
							
							 
							
							... 
							
							
							
							Add event and rule for suspicious delim(s) between method and uri.
Add unittests as well. 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								5ad7198dc0 
								
							
								 
							
						 
						
							
							
								
								http: add libhtp uri warning event  
							
							 
							
							... 
							
							
							
							Add event for libhtp warning added 0.5.17 for URI's with suspicious
delimeters. 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								cb15000387 
								
							
								 
							
						 
						
							
							
								
								http: add new events for invalid host header and host part of uri  
							
							 
							
							
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								85f13c4e28 
								
							
								 
							
						 
						
							
							
								
								http: update http rules  
							
							 
							
							
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								9f519e95a2 
								
							
								 
							
						 
						
							
							
								
								http: add event for libhtp detection of request port not matching tcp port.  
							
							 
							
							
							
						 
						
							13 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								aded3c5578 
								
							
								 
							
						 
						
							
							
								
								http: 'HTTP Host header ambiguous' after libhtp update. It now fires if hostname is present both in URL and Host header and the 2 are not equal.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								e21d8cdf01 
								
							
								 
							
						 
						
							
							
								
								file extract: improve multipart parsing and set events on some error conditions.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								93d121bf21 
								
							
								 
							
						 
						
							
							
								
								Update app layer events for HTTP now that libhtp has fixes for some response errors.  
							
							 
							
							
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Victor Julien
							
						 
						
							 
							
							
							
								
							
								132d9d1789 
								
							
								 
							
						 
						
							
							
								
								Add http-events.rules with an example rule for each HTTP event.  
							
							 
							
							
							
						 
						
							14 years ago