Customize Bro's Http log

Zeek
1

Hi,

I edited “/bro/share/bro/base/protocols/http/main.bro” file in order to be able to log more http headers - the edited file is attached to this mail.

Most of the things works great except the following headers which are not logged (always empty):

  • response_content_length

  • cookie

  • response_content_type

Comment:

I checked with wireshark that the network traffic that I simulated contained those headers.

Can some one tell me what is wrong with my edited main.bro file ?

Thanks,

Omer

main.bro (11.2 KB)