From: Tom Peters (thopeter) <thopeter@cisco.com>
Date: Wed, 21 Jul 2021 15:28:48 +0000 (+0000)
Subject: Merge pull request #2985 in SNORT/snort3 from ~KATHARVE/snort3:http2_wizard to master
X-Git-Tag: 3.1.9.0~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9f182371f6579cabd5e21691c9c5e88938f8c844;p=thirdparty%2Fsnort3.git

Merge pull request #2985 in SNORT/snort3 from ~KATHARVE/snort3:http2_wizard to master

Squashed commit of the following:

commit f62e3474a5d5a2e6991082af8bd87b203a118496
Author: Katura Harvey <katharve@cisco.com>
Date:   Mon Jul 19 14:09:30 2021 -0400

    lua: update HTTP/2 default_wizard hex with S2C pattern match
---

diff --git a/lua/snort_defaults.lua b/lua/snort_defaults.lua
index 31790ac6c..c85159466 100644
--- a/lua/snort_defaults.lua
+++ b/lua/snort_defaults.lua
@@ -406,6 +406,7 @@ default_wizard =
           to_server = netflow_versions },
 
         { service = 'http2', proto = 'tcp', client_first = true,
+          to_client = { '???|04 00 00 00 00 00|' },
           to_server = { '|50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a|' } },
 
 --[[