Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

IME - Reading Context Data from packets

Could anyone tell me how to read additional data other than the data in the context data packet. I need to read the rest of an http request but I am unsure how to go about doing this.

It shows part of a string where an SQL injection attempt was but doesn't show the first part of the http request.

1 REPLY
Gold

Re: IME - Reading Context Data from packets

You could try adding one of the "log packets" actions for the specific signature. It may or may not have what you're looking for though. If it doesn't you're kind of SOL unless you can magically get a trace at the right time.

167
Views
0
Helpful
1
Replies
CreatePlease to create content