IME - Reading Context Data from packets

Unanswered Question
Sep 30th, 2008

Could anyone tell me how to read additional data other than the data in the context data packet. I need to read the rest of an http request but I am unsure how to go about doing this.


It shows part of a string where an SQL injection attempt was but doesn't show the first part of the http request.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
mhellman Tue, 09/30/2008 - 08:48

You could try adding one of the "log packets" actions for the specific signature. It may or may not have what you're looking for though. If it doesn't you're kind of SOL unless you can magically get a trace at the right time.

Actions

This Discussion