Forum Discussion
hooleylist
Jun 29, 2009Cirrostratus
Is the update actually being made in the request to the server? Maybe it's a problem with caching of the HTTP:: commands. I thought using HTTP::query would have shown the update. Can you try logging in a second HTTP_REQUEST event?
when HTTP_REQUEST {
Check if path ends with /searchresults.aspx
if {[string tolower [HTTP::path]] ends_with "/searchresults.aspx"}{
Rewrite URI for u=https:// to u=http://
HTTP::uri [string map -nocase "u=https:// u=http://" [HTTP::uri]]
log local0. "[IP::client_addr]:[TCP::client_port]: Updated query string to [HTTP::query]"
}
}
when HTTP_REQUEST priority 501 {
log local0. "[IP::client_addr]:[TCP::client_port]: 501 Updated query string to [HTTP::query]"
}
Aaron