From 3e7714aca2893dd4c26fcecc3bbbdf0bf466e3e4 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Tue, 11 Mar 2014 12:11:33 +0100
Subject: [PATCH] eve-http: print <unknown> like in eve-files

When UA or Host are unknown, print <unknown> instead of <useragent
unknown> or <hostname unknown>.

Bug #1131.
---
 src/output-json-http.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/output-json-http.c b/src/output-json-http.c
index 339adf833a..f0649b3fc0 100644
--- a/src/output-json-http.c
+++ b/src/output-json-http.c
@@ -89,7 +89,7 @@ static void JsonHttpLogJSON(JsonHttpLogThread *aft, json_t *js, htp_tx_t *tx)
             SCFree(c);
         }
     } else {
-        json_object_set_new(hjs, "hostname", json_string("<hostname unknown>"));
+        json_object_set_new(hjs, "hostname", json_string("<unknown>"));
     }
 
     /* uri */
@@ -114,7 +114,7 @@ static void JsonHttpLogJSON(JsonHttpLogThread *aft, json_t *js, htp_tx_t *tx)
             SCFree(c);
         }
     } else {
-        json_object_set_new(hjs, "http_user_agent", json_string("<useragent unknown>"));
+        json_object_set_new(hjs, "http_user_agent", json_string("unknown>"));
     }
 
     /* x-forwarded-for */
-- 
2.47.2