For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MDPF52_180608's avatar
MDPF52_180608
Icon for Nimbostratus rankNimbostratus
Mar 13, 2015

iRule HTTP Response Data

Hello Devcentral community,

 

I'm trying to inspect the HTTP RESPONSE DATA of the webserver in order to check if the response page contains certain parameter.

 

From the current output of the http payload i can see the following format :

 

" ¤+h¨��Ù2ÂKbñ'“’µ�ŽÕí+[ɔ+ù ˜™_%+MçœJåÅ\䆸8›*–¹¡ÿƒÛOá "

 

Maybe i'm missing something ?

 

set test [HTTP::payload] binary scan $test H* hex set ascii [binary format H* $hex]

 

log local0. "Payload Response Data: $ascii" log local0. "HTTP_RESPONSE_DATA - PRINT PAYLOAD : $test Payload Len: [HTTP::payload length]; Payload: $ascii "

 

2 Replies

  • Check your incoming request (

    HTTP_REQUEST
    ) for the
    accept-encoding
    . In your iRule, remove the header from the request and then look at the response again and see if it's more legible. That header tells the server the types of content encoding/compression that it supports, so you may be seeing compressed data instead of raw data.

  • Yes, right. These are the headers in the request:

     

    Accepttext/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Encodinggzip, deflate Accept-Languageit-IT,it;q=0.8,en-US;q=0.5,en;q=0.3 Connectionkeep-alive Cookie_sn=zkPWARpwOA4a27gZUI06ejq7E0N7o0PgQEJolXFZl8mAZMStKe.fn5oPDH2Rcq3YWNkgF3SOcMmJeCAAAjBcp3LJd1E5hmQ-gicnMUhCmC-I50HKgGk9ELZug-5AxrUN5N5FAM-Fe3vgnG4Xa2zbkZM59yW3QZM- Host xxxx.xxx.com Refererxxxxxxxxxxxxx User-AgentMozilla/5.0 (xxxxxx)