Forum Discussion
Chris_Schaerli_
Jun 20, 2007Nimbostratus
Colin,
I am not sure what you mean by plugging an integer value in.
I split the rule into two rules to test them. For this block I get the TCL error.
when HTTP_RESPONSE {
collect the payload containing the REPLY data
HTTP::collect [HTTP::header Content-Length]
}
when HTTP_RESPONSE_DATA {
look for persistence data beginning the 59th character following the 'xmlns:soapenc=' string & ending @ "<" char
and follow existing persistence record or create a new one
persist uie [findstr [HTTP::payload] xmlns:soapenc= 58 <]
log local0. [findstr [HTTP::payload] xmlns:soapenc= 58 <]
}