[Oisf-devel] http reply with deflate not supported on Suricata ?

Victor Julien victor at inliniac.net
Mon Jul 8 07:39:39 UTC 2013


On 07/06/2013 09:58 PM, rmkml wrote:
> Hi,
> 
> Anyone confirm if deflate compression are supported or not on Suricata
> please ? (on http reply) or it's planned ?
> 
> libhtp/htp/htp.h : (suricata git 4 jul)
> ...
> #define COMPRESSION_NONE     0
> #define COMPRESSION_GZIP     1
> #define COMPRESSION_COMPRESS 2 // Not implemented
> #define COMPRESSION_DEFLATE  3 // Not implemented
> ...
> 
> Im curious, deflate compression are not implemented on libhtp because
> deflate are minor on http compression trafic, or deflate/compress are
> complicated implementation please ?
> 
> If you want, I open a new redmine ticket.

Libhtp indeed doesn't support it yet, so Suricata doesn't either. Please
open a ticket. Thanks!

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------




More information about the Oisf-devel mailing list