From: Victor Julien <victor@inliniac.net>
Date: Tue, 11 Mar 2014 11:11:33 +0000 (+0100)
Subject: eve-http: print <unknown> like in eve-files
X-Git-Tag: suricata-2.0rc3~11
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F884%2Fhead;p=thirdparty%2Fsuricata.git

eve-http: print <unknown> like in eve-files

When UA or Host are unknown, print <unknown> instead of <useragent
unknown> or <hostname unknown>.

Bug #1131.
---

diff --git a/src/output-json-http.c b/src/output-json-http.c
index 339adf833a..f0649b3fc0 100644
--- a/src/output-json-http.c
+++ b/src/output-json-http.c
@@ -89,7 +89,7 @@ static void JsonHttpLogJSON(JsonHttpLogThread *aft, json_t *js, htp_tx_t *tx)
             SCFree(c);
         }
     } else {
-        json_object_set_new(hjs, "hostname", json_string("<hostname unknown>"));
+        json_object_set_new(hjs, "hostname", json_string("<unknown>"));
     }
 
     /* uri */
@@ -114,7 +114,7 @@ static void JsonHttpLogJSON(JsonHttpLogThread *aft, json_t *js, htp_tx_t *tx)
             SCFree(c);
         }
     } else {
-        json_object_set_new(hjs, "http_user_agent", json_string("<useragent unknown>"));
+        json_object_set_new(hjs, "http_user_agent", json_string("unknown>"));
     }
 
     /* x-forwarded-for */