forked from CESNET/FlowTest
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathhttp_get.yml
More file actions
29 lines (28 loc) · 725 Bytes
/
Copy pathhttp_get.yml
File metadata and controls
29 lines (28 loc) · 725 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
name: HTTP Get Method
description: Check that HTTP Get method is properly parsed from HTTP request.
requirements:
protocols: [http]
marks: [http]
pcap: http_get.pcap
probe:
protocols: [http]
at_least_one: [http_host, http_method, http_method_id, http_url, http_status_code,
http_agent, http_content_type]
flows:
- src_ip: 192.168.1.140
dst_ip: 174.143.213.184
ip_version: 4
protocol: 6
bytes: 1234
bytes@rev: 23041
packets: 21
packets@rev: 19
src_port: 57678
dst_port: 80
http_host: packetlife.net
http_url: /images/layout/logo.png
http_method: GET
http_method_id: 1
http_status_code: 200
http_agent: Wget/1.12 (linux-gnu)
http_content_type: image/png