Expression Element |
Definition |
| REQ |
Flow Type. Operates on incoming, or request, packets. |
| REQ.HTTP |
Protocol. Operates on HTTP requests. |
| REQ.HTTP.METHOD |
Qualifier. Designates the HTTP method. |
| REQ.HTTP.URL |
Qualifier. Designates on the URL. |
| REQ.HTTP.URLTOKENS |
Qualifier. Designates the URL token. |
| REQ.HTTP.VERSION |
Qualifier. Designates the HTTP version. |
| REQ.HTTP.HEADER |
Qualifier. Designates the HTTP header. |
| REQ.HTTP.URLLEN |
Qualifier. Designates the URL length, as a number. |
| REQ.HTTP.URLQUERY |
Qualifier. Designates just the query portion of the URL. |
| REQ.HTTP.URLQUERYLEN |
Qualifier. Designates the length of just the query portion of the URL. |
| REQ.SSL |
Protocol. Operates on SSL requests. |
| REQ.SSL.CLIENT.CERT |
Qualifier. Designates the entire client certificate. |
| REQ.SSL.CLIENT.CERT.SUBJECT |
Qualifier. Designates the client certificate subject. |
| REQ.SSL.CLIENT.CERT.ISSUER |
Qualifier. Designates the issuer of the client certificate. |
| REQ.SSL.CLIENT.CERT.SIGALGO |
Qualifier. Designates the validation algorithm used by the client certificate. |
| REQ.SSL.CLIENT.CERT.VERSION |
Qualifier. Designates the client certificate version. |
| REQ.SSL.CLIENT.CERT.VALIDFROM |
Qualifier. Designates the date before which the client certificate is not valid. |
| REQ.SSL.CLIENT.CERT.VALIDTO |
Qualifier. Designates the date after which the client certificate is not valid. |
| REQ.SSL.CLIENT.CERT.SERIALNUMBER |
Qualifier. Designates the serial number of the client certificate. |
| REQ.SSL.CLIENT.CIPHER.TYPE |
Qualifier. Designates the encryption protocol used by the client. |
| REQ.SSL.CLIENT.CIPHER.BITS |
Qualifier. Designates the number of bits used by the client's SSL key. |
| REQ.SSL.CLIENT.SSL.VERSION |
Qualifier. Designates the SSL version the client is using. |
| REQ.TCP |
Protocol. Operates on incoming TCP packets. |
| REQ.TCP.SOURCEPORT |
Qualifier. Designates the source port of the incoming packet. |
| REQ.TCP.DESTPORT |
Qualifier. Designates the destination port of the incoming packet. |
| REQ.IP |
Protocol. Operates on incoming IP packets. |
| REQ.IP.SOURCEIP |
Qualifier. Designates the source IP of the incoming packet. |
| REQ.IP.DESTIP |
Qualifier. Designates the destination IP of the incoming packet. |
| RES |
Flow Type. Operates on outgoing, or response, packets. |
| RES.HTTP |
Protocol. Operates on HTTP responses. |
| RES.HTTP.VERSION |
Qualifier. Designates the HTTP version. |
| RES.HTTP.HEADER |
_Qualifier Designates the HTTP header. |
| RES.HTTP.STATUSCODE |
Qualifier. Designates the status code of the HTTP response. |
| RES.TCP |
Protocol. Operates on incoming TCP packets. |
| RES.TCP.SOURCEPORT |
Qualifier. Designates the source port of the outgoing packet. |
| RES.TCP.DESTPORT |
Qualifier. Designates the destination port of the outgoing packet. |
| RES.IP |
Protocol. Operates on outgoing IP packets. |
| RES.IP.SOURCEIP |
Qualifier. Designates the source IP of the outgoing packet. |
| RES.IP.DESTIP |
Qualifier. Designates the destination IP of the outgoing packet. |