Forum Discussion
andreoli_4699
Nimbostratus
NimbostratusHTTP::payload replace with MORE data?
Hi all, I have the following code:
when HTTP_REQUEST priority 300 {
set original_payload [HTTP::payload]
set original_length [...
andreoli_4699Nimbostratus
NimbostratusI agree, and am going to place a call with them today, but it's really wierd. I've removed all of my code now, the only custom code running is this:
when HTTP_REQUEST {
log local0. "Payload Length:[HTTP::payload length]:"
log local0. "Content Length:[HTTP::header value Content-Length]:"
log local0. "Payload:[HTTP::payload]:"
}
On larger payloads, the Payload Length returns zero, while the Content Length shows the right value. In those instances, Payload is blank, and I can see in a tcpdump that the soap envelope begins in the second packet. On smaller payloads, the lengths and payload are correct, and I can see the payload actually begin in the first packet.
Could it be something I'm doing wrong? Is the payload not available to the http_request event? That can't be, the smaller one works fine and besides, I have no control over whether the envelope begins in the first or second packet.
Very wierd!
