From: Philippe Antoine Date: Tue, 20 Jun 2023 12:12:42 +0000 (+0200) Subject: detect/http: request/response header support multi buffer X-Git-Tag: suricata-7.0.0~109 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d99cbc5e0b0af692e413793fd3d678367c74ad77;p=thirdparty%2Fsuricata.git detect/http: request/response header support multi buffer Ticket: #6163 That means that we can have rules matching different contents on different headers. --- diff --git a/src/detect-http-header.c b/src/detect-http-header.c index cc11cdf0c0..e5101f9276 100644 --- a/src/detect-http-header.c +++ b/src/detect-http-header.c @@ -750,6 +750,7 @@ void DetectHttpRequestHeaderRegister(void) DetectBufferTypeSetDescriptionByName("http_request_header", "HTTP header name and value"); g_http_request_header_buffer_id = DetectBufferTypeGetByName("http_request_header"); + DetectBufferTypeSupportsMultiInstance("http_request_header"); } static int DetectHTTPResponseHeaderSetup(DetectEngineCtx *de_ctx, Signature *s, const char *arg) @@ -784,6 +785,7 @@ void DetectHttpResponseHeaderRegister(void) DetectBufferTypeSetDescriptionByName("http_response_header", "HTTP header name and value"); g_http_response_header_buffer_id = DetectBufferTypeGetByName("http_response_header"); + DetectBufferTypeSupportsMultiInstance("http_response_header"); } /************************************Unittests*********************************/