-
Notifications
You must be signed in to change notification settings - Fork 5
Expand file tree
/
Copy pathhttp_404.yml
More file actions
30 lines (29 loc) · 823 Bytes
/
http_404.yml
File metadata and controls
30 lines (29 loc) · 823 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
name: HTTP Error 404
description: Check that HTTP 404 error response code is parsed properly.
requirements:
protocols: [http]
marks: [http]
pcap: http_404.pcap
probe:
protocols: [http]
at_least_one: [http_host, http_method, http_method_id, http_url, http_status_code,
http_agent, http_referer]
flows:
- src_ip: 192.168.1.11
dst_ip: 192.168.1.1
ip_version: 4
protocol: 6
bytes: 657
bytes@rev: 867
packets: 6
packets@rev: 5
src_port: 50820
dst_port: 80
http_host: 192.168.1.1
http_url: /check.lp?dsl=1&old_dsl=Up
http_method: GET
http_method_id: 1
http_status_code: 404
http_agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
http_referer: http://192.168.1.1/