[Oisf-users] Suricata 1.4 http keywords in rule options, how does matching occur for http_header?

Victor Julien lists at inliniac.net
Fri Feb 1 10:39:20 UTC 2013

On 01/31/2013 05:20 PM, Anoop Saldanha wrote:
>> Is there a way to get the hostname as it appeared in the request?
>> >
> Yes, we can.  Shall we introduce it as a new keyword?  http_raw_host; ?

That would be good ya.

Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-users mailing list