USArmyResearchLab / Dshell

Dshell is a network forensic analysis framework.
Other
5.44k stars 1.14k forks source link

Add sanity checks to web decoder #133

Closed amm3 closed 3 years ago

amm3 commented 3 years ago

This commit adds two checks on the request/response objects passed to http_handler, trying to determine if those objects are completely and/or actually HTTP objects.

dev195 commented 3 years ago

Would it be better for the return statements to not return anything? That would allow the web plugin to filter out non-web traffic for other decoders along the plugin chain.

amm3 commented 3 years ago

Makes sense to me, and I just tested and it seems to work well. I'll update my request. Thanks!