IME - Reading Context Data from packets

Unanswered Question
Sep 30th, 2008
User Badges:

Could anyone tell me how to read additional data other than the data in the context data packet. I need to read the rest of an http request but I am unsure how to go about doing this.

It shows part of a string where an SQL injection attempt was but doesn't show the first part of the http request.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
mhellman Tue, 09/30/2008 - 08:48
User Badges:
  • Blue, 1500 points or more

You could try adding one of the "log packets" actions for the specific signature. It may or may not have what you're looking for though. If it doesn't you're kind of SOL unless you can magically get a trace at the right time.


This Discussion