[Oisf-devel] http reply with deflate not supported on Suricata ?

[rmkml]

and add this link for reference:

http://noxxi.de/research/unusual-http-content-encoding.html

Regards
@Rmkml


On Sat, 6 Jul 2013, rmkml wrote:

> Hi,
>
> Anyone confirm if deflate compression are supported or not on Suricata please 
> ? (on http reply) or it's planned ?
>
> libhtp/htp/htp.h : (suricata git 4 jul)
> ...
> #define COMPRESSION_NONE     0
> #define COMPRESSION_GZIP     1
> #define COMPRESSION_COMPRESS 2 // Not implemented
> #define COMPRESSION_DEFLATE  3 // Not implemented
> ...
>
> Im curious, deflate compression are not implemented on libhtp because deflate 
> are minor on http compression trafic, or deflate/compress are complicated 
> implementation please ?
>
> If you want, I open a new redmine ticket.
>
> Regards
> @Rmkml
>