[Snort-devel] Publishing http attributes

Akhil Koul akhil.koul8 at ...2499...
Tue Jun 28 05:26:16 EDT 2016


For a project I am working on, I would like to publish http host, version
and method so that it is available to subscribers. Currently, only
http_raw_uri is published which is subscribed and logged by data_log

I would like the data_log inspector to be able to subscribe to above
attributes(or maybe a new inspector which can subscribe to and handle
several http attributes).
How do I do this? Any help will be appreciated.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20160628/65f08a8a/attachment.html>

More information about the Snort-devel mailing list