[Bro] Bro sqli + xss sans paper

Tue Apr 11 04:10:08 PDT 2017

I am trying to add the two scripts for sqli and xss from this paper
https://www.sans.org/reading-room/whitepapers/detection/web-application-attack-analysis-bro-ids-34042

but i get this error HTTP::c$http$first_chunk no such a field in record...
Anyone knows what is happening?

Thanks in advanced.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170411/86907448/attachment.html 