Tracking session in soap header?

Colin,

 

 

I am not sure what you mean by plugging an integer value in.

 

 

I split the rule into two rules to test them. For this block I get the TCL error.

 

 

when HTTP_RESPONSE {

 

collect the payload containing the REPLY data

 

HTTP::collect [HTTP::header Content-Length]

 

}

 

when HTTP_RESPONSE_DATA {

 

look for persistence data beginning the 59th character following the 'xmlns:soapenc=' string & ending @ "<" char

 

and follow existing persistence record or create a new one

 

persist uie [findstr [HTTP::payload] xmlns:soapenc= 58 <]

 

log local0. [findstr [HTTP::payload] xmlns:soapenc= 58 <]

 

}