detect: use http.connection to client

Ticket: #5746

diff --git a/doc/userguide/rules/http-keywords.rst b/doc/userguide/rules/http-keywords.rst
index 5dda6dcb0a33431dd6fbe8026d0bd16929545c04..4063165739d70357e19ed946be03ee07c0619899 100644 (file)
--- a/doc/userguide/rules/http-keywords.rst
+++ b/doc/userguide/rules/http-keywords.rst
@@ -42,7 +42,7 @@ http.accept                    http_accept (*)          Request
 http.accept_lang               http_accept_lang (*)     Request
 http.accept_enc                http_accept_enc (*)      Request
 http.referer                   http_referer (*)         Request
-http.connection                http_connection (*)      Request
+http.connection                http_connection (*)      Both
 file.data                      file_data (*)            Both
 http.content_type              http_content_type (*)    Both
 http.content_len               http_content_len (*)     Both

diff --git a/src/detect-http-connection.c b/src/detect-http-connection.c
index 2995898df730182e4c1284529b2847d01523dece..2db451236721764885403d3a40f10dde530eae1e 100644 (file)
--- a/src/detect-http-connection.c
+++ b/src/detect-http-connection.c
@@ -38,6 +38,7 @@
 #define HEADER_NAME "Connection"
 #define KEYWORD_ID DETECT_AL_HTTP_HEADER_CONNECTION
 #define KEYWORD_TOSERVER 1
+#define KEYWORD_TOCLIENT    1
 
 #include "detect-http-headers-stub.h"
 #include "detect-http-connection.h"