Content-Length missing in HTTP request

Hi Marc,

 

 

I think you'd need to search for the first instance of two \r\n (carriage return + line feed, carriage return + line feed) as that is what should delineate the HTTP headers from the payload. I'm not sure if you could use something like 'string first \r\n\r\n [TCP::payload]' or whether you'd need to convert the payload to hex first using 'binary scan [TCP::payload] H* payload_hex (Click here)' and then search for the CR LF CR LF characters using 'string first $payload_hex \x0d\x0a\x0d\x0a'.

 

 

And unfortunately, I'm not sure if there is a more efficient way to do this. This approach would mean you'd be collecting every TCP payload in order to work around the issue for one client.

 

 

Aaron