suricata

Author	SHA1	Message	Date
Victor Julien	1235c578b2	xff: support ports and more ipv6 notations It's not uncommon to see an header like: X-Forwarded-For: 1.2.3.4:56789 This patch recognizes this case and ignores the port. It also supports this for IPv6 if the address has the following notation: X-Forwarded-For: [12::34]:1234 This patch also adds unittests.	10 years ago
Duarte Silva	68f43ffffb	Implemented the diferent behaviour depending on the proxy deployment - In forward deployment mode the first IP will be returned - In reverse deployment mode the last IP will be retuned	11 years ago
Duarte Silva	496200dd08	Prepared everything for the proxy deployment configuration - Added the suricata.yaml configurations and updated the comments - Renamed the field in the configuration structure to something generic - Added two new constants and the warning codes	11 years ago
Duarte Silva	4e04cd2d1b	Adding XFF support to EVE alert output - Created app-layer-htp-xff.c and app-layer-htp-xff.h - Added entries in the Makefile.am - Added the necessary configuration options to EVE alert section - Updated Unified2 XFF configuration comments and removed unnecessary whitespace - Created a generic function to parse the configuration - Release the flow locks sooner and remove debug logging - Added XFF support to EVE alert output	11 years ago