cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
558
Views
0
Helpful
1
Replies

IME - Reading Context Data from packets

shiznitide
Level 1
Level 1

Could anyone tell me how to read additional data other than the data in the context data packet. I need to read the rest of an http request but I am unsure how to go about doing this.

It shows part of a string where an SQL injection attempt was but doesn't show the first part of the http request.

1 Reply 1

mhellman
Level 7
Level 7

You could try adding one of the "log packets" actions for the specific signature. It may or may not have what you're looking for though. If it doesn't you're kind of SOL unless you can magically get a trace at the right time.

Review Cisco Networking for a $25 gift card