From 36cd139d30502d8b5698487264a0821314f7c21b Mon Sep 17 00:00:00 2001 From: fullmetalcache Date: Tue, 14 Sep 2021 09:57:55 -0600 Subject: [PATCH] Fix http.log Filter for Proxy Entries --- parser/http.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/parser/http.go b/parser/http.go index e6293e26..98e616d6 100644 --- a/parser/http.go +++ b/parser/http.go @@ -74,8 +74,10 @@ func parseHTTPEntry(parseHTTP *parsetypes.HTTP, filter filter, retVals ParseResu // (e.g., beacons), where false positives might arise due to the proxy IP // appearing as a destination, while still allowing for processing that // data for the proxy modules - if dstIsProxy && (filter.filterDomain(fqdn) || filter.filterSingleIP(srcIP)) { - return + if dstIsProxy { + if filter.filterDomain(fqdn) || filter.filterSingleIP(srcIP) { + return + } } else if filter.filterDomain(fqdn) || filter.filterConnPair(srcIP, dstIP) { return }