HTTP: add further configuration to enable/disable metadata extraction (#2972)

Rename existing configuration knobs, to better separate metadata from
requests, from metadata from responses
This commit is contained in:
Ivan Nardi 2025-09-23 15:11:25 +02:00 committed by GitHub
parent 1c1535738f
commit ddd277fc44
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
11 changed files with 67 additions and 45 deletions

View file

@ -69,15 +69,19 @@ List of the supported configuration options:
| | | | | | possible values are: ookla, bittorrent, stun, tls_cert, mining, msteams, fpc_dns, signal. The global scope con be set only if a global context has been |
| | | | | | initialized |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "http" | "metadata.request_content_type" | enable | NULL | NULL | Enable/disable export of Request Content Type header for HTTP flows. |
| "http" | "metadata.req.content_type" | enable | NULL | NULL | Enable/disable export of Content Type (request) header for HTTP flows. |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "http" | "metadata.referer" | enable | NULL | NULL | Enable/disable export of Referer header for HTTP flows. |
| "http" | "metadata.req.referer" | enable | NULL | NULL | Enable/disable export of Referer (request) header for HTTP flows. |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "http" | "metadata.host" | enable | NULL | NULL | Enable/disable export of Host header for HTTP flows. |
| "http" | "metadata.req.host" | enable | NULL | NULL | Enable/disable export of Host (request) header for HTTP flows. |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "http" | "metadata.username" | enable | NULL | NULL | Enable/disable export of (cleartext) username metadata for HTTP flows. |
| "http" | "metadata.req.username" | enable | NULL | NULL | Enable/disable export of (cleartext) username metadata for HTTP flows (from request header). |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "http" | "metadata.password" | enable | NULL | NULL | Enable/disable export of (cleartext) password metadata for HTTP flows. |
| "http" | "metadata.req.password" | enable | NULL | NULL | Enable/disable export of (cleartext) password metadata for HTTP flows (from request header). |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "http" | "metadata.resp.content_type" | enable | NULL | NULL | Enable/disable export of Content Type (response) header for HTTP flows. |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "http" | "metadata.resp.server" | enable | NULL | NULL | Enable/disable export of Server (request) header for HTTP flows. |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| "tls" | "certificate_expiration_threshold" | 30 | 0 | 365 | The threshold (in days) used to trigger the `NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE` flow risk |
+--------------+---------------------------------------------------------------+-----------------+------------+------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+