next up previous contents
Next: Format Up: Payload Detection Rule Options Previous: Examples   Contents


The http_stat_msg keyword is a content modifier that restricts the search to the extracted Status Message field from a HTTP server response.

As this keyword is a modifier to the previous content keyword, there must be a content in the rule before http_stat_msg is specified.

The Status Message field will be extracted only if the extended_reponse_inspection is configured for the HttpInspect (see 2.2.6).


Eugene Misnik 2013-05-08