Method readRequest

decoder/stream/http/http_reader.go:423–525

HTTP Request

(b *bufio.Reader)

// HTTP Request

func (h *httpReader) readRequest(b *bufio.Reader) error {
	// Extract header order for JA4H fingerprinting before parsing
	// We need to peek at the raw bytes to preserve header order
	headerOrder, cookieFields, acceptLang := extractHeaderOrderFromReader(b)

	req, err := http.ReadRequest(b)
	if errors.Is(err, io.EOF) || errors.Is(err, io.ErrUnexpectedEOF) {
		return err
	} else if err != nil {
		httpLog.Error(
			"failed to read HTTP request",
			zap.String("ident", h.conversation.Ident),
			zap.Error(err),
		)
		return err
	}

	body, err := io.ReadAll(req.Body)
	s := len(body)
	if err != nil {
		httpLog.Error(
			"failed to read HTTP request body",
			zap.String("ident", h.conversation.Ident),
			zap.Error(err),
			zap.Int("length", s),
		)
		// continue execution
	} else {
		_ = req.Body.Close()

		// Restore body so it can be read again
		req.Body = io.NopCloser(bytes.NewBuffer(body))
	}
	//if h.tcpStreamReader.hexdump {
	//	logReassemblyInfo("Body(%d/0x%x)\n%s\n", len(body), len(body), hex.Dump(body))
	//}

	httpLog.Debug("HTTP request",
		zap.String("ident", h.conversation.Ident),
		zap.String("method", req.Method),
		zap.String("url", req.URL.String()),
		zap.Int("bodyLength", s),
	)

	t := h.conversation.FirstClientPacket.UnixNano()

	request := &httpRequest{
		request:      req,
		timestamp:    t,
		clientIP:     h.conversation.ClientIP,
		serverIP:     h.conversation.ServerIP,
		clientPort:   h.conversation.ClientPort,
		serverPort:   h.conversation.ServerPort,
		flow:         h.conversation.Ident,
		headerOrder:  headerOrder,
		cookieFields: cookieFields,
		acceptLang:   acceptLang,
	}