Merge pull request #2985 in SNORT/snort3 from ~KATHARVE/snort3:http2_wizard to master

Squashed commit of the following:

commit f62e3474a5d5a2e6991082af8bd87b203a118496
Author: Katura Harvey <katharve@cisco.com>
Date:   Mon Jul 19 14:09:30 2021 -0400

    lua: update HTTP/2 default_wizard hex with S2C pattern match

diff --git a/lua/snort_defaults.lua b/lua/snort_defaults.lua
index 31790ac6c1624dcf1d8e6c7aa79d60a4fc515ea7..c851594662faad026cfc7b1ac0744d555faf2216 100644 (file)
--- a/lua/snort_defaults.lua
+++ b/lua/snort_defaults.lua
@@ -406,6 +406,7 @@ default_wizard =
           to_server = netflow_versions },
 
         { service = 'http2', proto = 'tcp', client_first = true,
+          to_client = { '???|04 00 00 00 00 00|' },
           to_server = { '|50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a|' } },
 
 --[[