https://inliniac.net/blog/tag/malware/ Recent content in Malware on Inliniac Hugo en Wed, 11 Jan 2012 19:09:17 +0000 https://inliniac.net/blog/2012/01/11/http-parsing-events-in-suricata/ Wed, 11 Jan 2012 19:09:17 +0000 https://inliniac.net/blog/2012/01/11/http-parsing-events-in-suricata/ <p>With the 1.2rc1 release you will notice no more HTTP errors on the screen. Or SMTP errors. This output has been disabled finally. This was a long time annoyance.</p> <p>As you may still be interested in the errors they are now available through the rule language. In rules/http-events.rules and rules/smtp-events.rules rules for all possible events/errors can be found.</p> <p>Example: <code>app-layer-event:http.missing_host_header;</code></p> <p>This will match on HTTP/1.1 requests without a Host header.</p>