Couldn't get HTTP POST content

Elastic Stack Beats
1

when i'm trying to use packetbeat, but couldn't get the http post content, from the official demo site, it have the post content. not sure how to set it up, anybody can help?

tried open following:

send_all_headers: true
send_request: true
but, they're both on header level. include_body_for can only get http response body.

how to get http request body like post content? thanks a lot!

  • Version: packetbeat-5.0.0-alpha4-linux-x86_64]
2

for some http have the post body in params, most of the post http request don't have body

i see for official demo site, can have post body in request like below:

POST /login HTTP/1.1
Host: packetbeat.com
Connection: keep-alive
Content-Length: 43
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Origin: http://packetbeat.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.57 Safari/537.17
Content-Type: application/x-www-form-urlencoded
Referer: http://packetbeat.com/login
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: __utmx=149357239.NSUz4QmJReWsXw6TN26IIQ$68934090-0:1; __utmxx=149357239.NSUz4QmJReWsXw6TN26IIQ$68934090-0:1361226084:15552000; __utma=149357239.1198651862.1361225966.1361696899.1361704280.9; __utmb=149357239.4.10.1361704280; __utmc=149357239; __utmz=149357239.1361304733.2.2.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided); session="c3L2Pn5ymhiytth5Sg1YgNRyGWI=?_id=Uyc/XHhlOVx4OWJceGZjXHhlMVx4OWVceGQyXHg4Nlx4ZjJBXHg4OFlceDhjRVx4ODZceDhiJwpwMQou&selected_transactions=KGxwMQpWNTEyOWU0Yjg0NzQxMDQ5OWQ2OTU3NTgwCnAyCmFWNTEyOWU0YmE0NzQxMDQ5OWQ2OTU3NTgxCnAzCmEu"

Email=packetbeat%40example.com&Password=****
3

This topic was automatically closed after 21 days. New replies are no longer allowed.