How can I monitor HTTP GETs on a Network Monitor?

Products

• Data Loss Prevention Network Monitor
• Data Loss Prevention Enforce
• Data Loss Prevention

Issue/Introduction

Monitoring HTTP GETs on a Network Monitor

Resolution

Monitoring of HTTP GETS is controlled via the properties in the Server Server  page.

PacketCapture.DISCARD_HTTP_GET:

If true, discards HTTP GET streams.

 

L7.processGets:

If true, the GET requests are processed. If false, the GET requests are not processed. Note that this setting interacts with the L7.minSizeofGetURL setting.

To capture HTTP GETS, change the values and restart the Network Monitor process.

Additional Information

For more information on when this might not work, please see this related KB: Network Monitor Does Not Generate Incidents On Web Content With HTTP GET monitoring enabled (broadcom.com)