tracee icon indicating copy to clipboard operation
tracee copied to clipboard

GetProtoHTTPByName for net_packet_http_request

Open HenrikWittemeier opened this issue 4 months ago • 1 comments

Description

Hi, im trying to write a go signature in which i need the HTTPRequest Header Data of the Event net_packet_http_request. I found the function GetProtoHTTPByName(eventObj, "http_proto") that works the event net_packet_http, but i found no way to do similar with the net_packet_http_request event.

Thanks for your help!

###Steps to reproduce

  1. Write a Go Signature that uses the event net_packet_http_request and try to get the http_request field of the event.
  2. Compile and run it
  3. See the error protocol HTTP: type error (should be trace.ProtoHTTP, is trace.ProtoHTTPRequest)"}"}]

Output of tracee version:

Tracee Version v0.22.0

Output of uname -a:

Linux tracee-hqmbk 6.8.0-45-generic #45-Ubuntu SMP PREEMPT_DYNAMIC Fri Aug 30 12:02:04 UTC 2024 x86_64 GNU/Linux

HenrikWittemeier avatar Oct 10 '24 11:10 HenrikWittemeier