-
Notifications
You must be signed in to change notification settings - Fork 5
Expand file tree
/
Copy pathhttp_500.yml
More file actions
32 lines (31 loc) · 969 Bytes
/
http_500.yml
File metadata and controls
32 lines (31 loc) · 969 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
name: HTTP Error 500
description: Check that HTTP 500 error response code is parsed properly.
requirements:
protocols: [http]
marks: [http]
pcap: http_500.pcap
probe:
protocols: [http]
at_least_one: [http_host, http_method, http_method_id, http_url, http_status_code,
http_agent, http_content_type, http_referer]
flows:
- src_ip: 192.168.0.113
dst_ip: 209.31.22.39
ip_version: 4
protocol: 6
bytes: 931
bytes@rev: 4298
packets: 6
packets@rev: 6
src_port: 3541
dst_port: 80
http_host: www.frys.com
http_url:
/category/Outpost/Notebooks+&+Tablets/View+All+Notebooks?site=sa:Notebook%20Pod:Pod2
http_method: GET
http_method_id: 1
http_status_code: 500
http_agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.3) Gecko/20090824
Firefox/3.5.3 (.NET CLR 3.5.30729)
http_content_type: [text/html, text/html; charset=UTF-8]
http_referer: http://www.frys.com/template/notebook/