User Tools

Site Tools


pom-ng:proto:http

Protocol http

This module parses HTTP connections as defined in RFC 2616.

Events

Name Payload associated Description
http_querynoContains all the information about an HTTP query made by a client to a server.
http_responsenoContains all the information about an HTTP response sent to a client by a server.

If you are looking for a compound event containing information on both the query and the request, there is the event http_request from the http analyzer.

http_query

This event is generated for each client query addressed to a server.

Field Type Description
first_linestringFirst line of the request. Usually something like “GET / HTTP/1.1”.
proto_versionstringVersion of the protocol used for the query if specified for example : “HTTP/1.1”.
methodstringHTTP method used. For example “GET” or “POST”.
urlstringURL requested by the client without the hostname.
start_timetimestampWhen the query started.
end_timetimestampWhen the query was fully sent.
headersstring listList of headers in the query.

http_response

This event is generated for each reply from the server to the client.

Field Type Description
statusuint16Status code of the response. For example 200.
proto_versionstringVersion of the protocol used for the query if specified for example : “HTTP/1.1”.
start_timetimestampWhen the query started.
end_timetimestampWhen the query was fully sent.
headersstring listList of headers in the response.

Packet fields

None.

Parameters

None.

pom-ng/proto/http.txt · Last modified: 2012/10/12 11:22 by 2001:7e8:2221:600:9471:feff:febb:91f7