Forum Discussion
CharlesCS
May 09, 2019Cirrus
You can't really use
TCP::collect
or TCP::payload
in the HTTP_REQUEST event handler. Instead, look into the HTTP::collect command, which would then let you examine the HTTP::payload content in the HTTP_REQUEST_DATA event.