From: Shravan Rangarajuvenkata (shrarang) Date: Thu, 5 Nov 2020 19:54:29 +0000 (+0000) Subject: Merge pull request #2594 in SNORT/snort3 from ~KAMURTHI/snort3:http2_https to master X-Git-Tag: 3.0.3-5~14 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d80d597750ae0781e7e5b8437f6161acccaf7cb9;p=thirdparty%2Fsnort3.git Merge pull request #2594 in SNORT/snort3 from ~KAMURTHI/snort3:http2_https to master Squashed commit of the following: commit 05c21e9ad5c54b6cd37ba55ad9e3324a3bb0e290 Author: Kanimozhi Murthi Date: Mon Nov 2 12:11:14 2020 -0500 appid: prefix http/2 decrypted url with "https:// --- diff --git a/src/network_inspectors/appid/appid_http_session.cc b/src/network_inspectors/appid/appid_http_session.cc index 50efedae9..03609acd7 100644 --- a/src/network_inspectors/appid/appid_http_session.cc +++ b/src/network_inspectors/appid/appid_http_session.cc @@ -725,7 +725,10 @@ void AppIdHttpSession::update_url(AppidChangeBits& change_bits) { if (meta_data[MISC_URL_FID]) delete meta_data[MISC_URL_FID]; - meta_data[MISC_URL_FID] = new std::string(std::string("http://") + *host + *uri); + if (asd.get_session_flags(APPID_SESSION_DECRYPTED)) + meta_data[MISC_URL_FID] = new std::string(std::string("https://") + *host + *uri); + else + meta_data[MISC_URL_FID] = new std::string(std::string("http://") + *host + *uri); change_bits.set(APPID_URL_BIT); } }