[Oisf-users] Suricata 1.4 http keywords in rule options, how does matching occur for http_header?

[Victor Julien]

On 01/31/2013 05:20 PM, Anoop Saldanha wrote:
>> Is there a way to get the hostname as it appeared in the request?
>> >
> Yes, we can.  Shall we introduce it as a new keyword?  http_raw_host; ?
> 

That would be good ya.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------