[Bro] Trying to extract HTTP payload

[Abhishek Chanda]

Here:

1347993371.841877       J6Gs3YxcaZ3     10.0.3.15       33554
216.92.99.29    80      1       GET     www.effetech.com
/images/msn2_full.gif   -       Mozilla/5.0 (X11; Ubuntu; Linux i686;
rv:13.0) Gecko/20100101 Firefox/13.0.1    0       47818   200     OK
   -       -       -       (empty) -       -       -       image/gif
    -       -

I cleared my browser cache before I tried to get the image.

Thanks

On Tue, Sep 18, 2012 at 11:32 AM, Seth Hall <seth at icir.org> wrote:
>
> On Sep 18, 2012, at 2:27 PM, Abhishek Chanda <abhishek.lists at gmail.com> wrote:
>
>> I then pointed my browser to a gif image. The entry for the image
>> appears in http.log but the image does not get saved. I am sure that
>> the interface is correct. What else can go wrong?
>
>
> What's the line in http.log?
>
>   .Seth
>
> --
> Seth Hall
> International Computer Science Institute
> (Bro) because everyone has a network
> http://www.bro-ids.org/
>