Commit Graph

19 Commits (227e2812f6c96fc08d2659aa36853542ec403473)

Author SHA1 Message Date
Philippe Antoine af4f816204 http: sets compression bomb limit 6 years ago
Philippe Antoine 9cbf9ef7a4 HTTP new parser warning for Ambiguous C-L 6 years ago
Victor Julien c9c23d5cda htp: set lzma memlimit from config 6 years ago
Philippe Antoine b5f3e03209 New app layer event for invalid http request line
Handles logs from libhtp even if case of error
6 years ago
Philippe Antoine 8a339e73d3 http: adds an event for double encoded uri 6 years ago
Philippe Antoine 3e12066819 http: adds events for each libhtp log
Fixes #997
6 years ago
Philippe Antoine b6b7778e2d http: adds event for header repetition 6 years ago
Philippe Antoine a1c6e091ac http: new event for auth unrecognized
activates libhtp auth parsing
Fixes #984
6 years ago
Victor Julien d0cded2523 http: set events for too many layers of compression
libhtp would already issue warnings, but these were not mapped
to events yet.
7 years ago
Victor Julien 52195a4192 http: add event for leading spaces on request line
Libhtp will issue a warning in this case, so we can match on this.
This patch adds event, rule and unittest.
10 years ago
Victor Julien e78e33a428 http: add event for suspicious method delimeter
Add event and rule for suspicious delim(s) between method and uri.

Add unittests as well.
10 years ago
Victor Julien 5ad7198dc0 http: add libhtp uri warning event
Add event for libhtp warning added 0.5.17 for URI's with suspicious
delimeters.
10 years ago
Victor Julien cb15000387 http: add new events for invalid host header and host part of uri 12 years ago
Victor Julien 85f13c4e28 http: update http rules 12 years ago
Victor Julien 9f519e95a2 http: add event for libhtp detection of request port not matching tcp port. 12 years ago
Victor Julien aded3c5578 http: 'HTTP Host header ambiguous' after libhtp update. It now fires if hostname is present both in URL and Host header and the 2 are not equal. 13 years ago
Victor Julien e21d8cdf01 file extract: improve multipart parsing and set events on some error conditions. 13 years ago
Victor Julien 93d121bf21 Update app layer events for HTTP now that libhtp has fixes for some response errors. 13 years ago
Victor Julien 132d9d1789 Add http-events.rules with an example rule for each HTTP event. 13 years ago