]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
output/file: http2 metdata is logged in http object
authorPhilippe Antoine <pantoine@oisf.net>
Fri, 16 Jun 2023 14:22:29 +0000 (16:22 +0200)
committerVictor Julien <vjulien@oisf.net>
Fri, 7 Jul 2023 04:46:59 +0000 (06:46 +0200)
as is done for http2 events and alerts.
The http.version integer can help to determine if this is HTTP2

Ticket: #6165

etc/schema.json
src/output-json-file.c

index 3fa763603ae3de47d032a149b24e93aa41ddd737..32510a6198fae23933446f3b4feec62c772358ce 100644 (file)
             },
             "additionalProperties": false
         },
-        "http2": {
-            "type": "object",
-            "properties": {
-                "http_method": {
-                    "type": "string"
-                },
-                "http_user_agent": {
-                    "type": "string"
-                },
-                "length": {
-                    "type": "integer"
-                },
-                "status": {
-                    "type": "integer"
-                },
-                "url": {
-                    "type": "string"
-                },
-                "version": {
-                    "type": "string"
-                },
-                "request_headers": {
-                    "type": "array",
-                    "minItems": 1,
-                    "items": {
-                        "type": "object",
-                        "properties": {
-                            "name": {
-                                "type": "string"
-                            },
-                            "table_size_update": {
-                                "type": "integer"
-                            },
-                            "value": {
-                                "type": "string"
-                            }
-                        },
-                        "additionalProperties": false
-                    }
-                },
-                "response_headers": {
-                    "type": "array",
-                    "minItems": 1,
-                    "items": {
-                        "type": "object",
-                        "properties": {
-                            "name": {
-                                "type": "string"
-                            },
-                            "table_size_update": {
-                                "type": "integer"
-                            },
-                            "value": {
-                                "type": "string"
-                            }
-                        },
-                        "additionalProperties": false
-                    }
-                },
-                "http2": {
-                    "type": "object",
-                    "properties": {
-                        "stream_id": {
-                            "type": "integer"
-                        },
-                        "request": {
-                            "type": "object",
-                            "properties": {
-                                "priority": {
-                                    "type": "integer"
-                                }
-                            },
-                            "additionalProperties": false
-                        },
-                        "response": {
-                            "type": "object",
-                            "properties": {
-                                "error_code": {
-                                    "type": "string"
-                                }
-                            },
-                            "additionalProperties": false
-                        }
-                    },
-                    "additionalProperties": false
-                }
-            },
-            "additionalProperties": false
-        },
         "ike": {
             "type": "object",
             "optional": true,
index 540e1be001f7ce7f8c49bb29e46e492f885ce900..a0ce76d71f01ef8f0e7fb8b29662c0e47c56609a 100644 (file)
@@ -174,7 +174,7 @@ JsonBuilder *JsonBuildFileInfoRecord(const Packet *p, const File *ff, void *tx,
             break;
         case ALPROTO_HTTP2:
             jb_get_mark(js, &mark);
-            jb_open_object(js, "http2");
+            jb_open_object(js, "http");
             if (EveHTTP2AddMetadata(p->flow, tx_id, js)) {
                 jb_close(js);
             } else {