etc/schema: match on http response body

Matching on the HTTP response body is not really possible as it is
a transformed version that can not be accessed via the signature
language.
pull/15119/head
Eric Leblond 4 weeks ago committed by Victor Julien
parent 41834f0a05
commit 97a0ad342b

@ -2399,18 +2399,13 @@
"description": "Base64 of the response body",
"suricata": {
"keywords": [
"file.data"
"http.response_body", "file.data"
]
}
},
"http_response_body_printable": {
"type": "string",
"description": "The ascii-printable characters of the response body",
"suricata": {
"keywords": [
"http.response_body", "file.data"
]
}
"description": "The ascii-printable characters of the response body"
},
"http_user_agent": {
"type": "string",

Loading…
Cancel
Save