Thank you, I was able to extract the URI b/w "GET" and " HTTP" (to remove the last space before HTTP) with:
when CLIENT_ACCEPTED {
TCP::collect 200
set ::uri 0
}
when CLIENT_DATA {
if { [regexp "/vMoD.+HTTP" [TCP::payload] match] } {
log local0. "match found: $match"
set ::uri [getfield $match " HTTP" 1]
log local0. $::uri
} else {
log local0. "no match"
}
}
I tried adding
when HTTP_REQUEST_DATA {
HTTP::redirect http://[HTTP::host]$::uri
}
I was looking for a simple way to test and see if I can substitue the URI with a new one, but obviously it does not. Do I need to figure out a way to replace it within the CLIENT_DATA event?
John