[Oisf-users] [FORGED] HTTP Stateful parsing

[Russell Fulton]

> On 27 Oct 2016, at 20:38, Vishal Kotalwar <vishalkv at altencalsoftlabs.com> wrote:
> 
> Hi All,
> 
>     HTTP is a stateless protocol, so I would like to know why does suricata have stateful parsing and how does it help suricata in better detection?
> 
This is not true in practice.  Cookies are one means of allowing state to be preserved between request.


> 
> -- 
> Thanks & Regards, 
> Vishal V. Kotalwar
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 9-11 in Washington, DC: http://suricon.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20161028/96ba38da/attachment-0002.html>