code_public/ja4-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(main): add error logging for HTTP parsing failures

Browse Source 
Added warning logs when HTTP/1.x request/response parsing fails
to aid in debugging malformed traffic and parser issues.

Changes:
- Log warning when ParseHTTP1Response returns nil
- Log warning when ParseHTTP1Request returns nil (SSL events)
- Log warning when ParseHTTP1Request returns nil (plain HTTP)

Includes src IP and data length for context.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Jacquin Antoine
2026-04-19 14:38:20 +02:00
parent 678aa48a12
commit 3429c74e03
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
services/ja4ebpf/cmd/ja4ebpf/main.go
View File

@ -733,6 +733,7 @@ func consumeSSLEvents(ctx context.Context, rd *perf.Reader, mgr *correlation.Man
if parser.IsHTTP1Response(sslData) {
resp := parser.ParseHTTP1Response(sslData)
if resp == nil {
log.Printf("[warn] HTTP/1.x response parsing failed for src=%v", key)
continue
}
mgr.Update(key, func(s *correlation.SessionState) {
@ -868,6 +869,7 @@ func consumeSSLEvents(ctx context.Context, rd *perf.Reader, mgr *correlation.Man
// HTTP/1.x : parser la requête
req := parser.ParseHTTP1Request(sslData)
if req == nil {
log.Printf("[warn] HTTP/1.x request parsing failed, src=%v, data_len=%d", key, len(sslData))
continue
}
mgr.Update(key, func(s *correlation.SessionState) {
@ -1028,6 +1030,7 @@ func consumeHTTPPlainEvents(ctx context.Context, rd *perf.Reader, mgr *correlati
if parser.IsHTTP1Request(httpData) {
req := parser.ParseHTTP1Request(httpData)
if req == nil {
log.Printf("[warn] HTTP plain request parsing failed, src=%v, data_len=%d", key, len(httpData))
continue
}
mgr.Update(key, func(s *correlation.SessionState) {