Forum Discussion
Matt_Williamson
Mar 30, 2005Nimbostratus
Hi, the script searches for the string "USERNAME=" in the 2500 bytes of tcp data collected. The way the actual stream looks is like this......
Displayt..0t..Env.31t..USERNAME=s009999t..Env.30t..
The 9 and the "t" tell it to start 9 bytes after "USERNAME=" (since it's 9 bytes long) and stop at "t". This way it's reading "s009999" which is the userid I want to persist on. The value in the "t" position can be what ever fits for you. For the streams I'm looking at they are separted by "t..".
Cheers,
Matt