Forum Discussion
Pratipal_340236
May 09, 2019Nimbostratus
Tried this variation, but still didn't worked
when HTTP_REQUEST { TCP::collect }
when HTTP_REQUEST_DATA { if {[HTTP::uri] starts_with "/sm/sms-mo" }{findstr [TCP::payload] "53747"} { HTTP::uri [string map -nocase {"/sm/sms-mo" "/IMOST/calro/sms/notifySmsReception/v1"} [HTTP::uri]] log local0. "changede1 $[HTTP::uri]" pool IMOST_28480_TESTBED }
}