Forum Discussion
Jonathan_Landis
Nimbostratus
NimbostratusMultiple message-header fields with the same field-name
The following rule logs the "Cookie" header of http requests:
when HTTP_REQUEST {
set ch [HTTP::header "Cookie"]
if {$ch != ""} {log local0. "$ch"} else {log local0. "no cookie"...
Jonathan_LandisNimbostratus
NimbostratusThe RFC does not say there should be only one "Accept" header. See the last paragraph in section 4.2.
