Article Number
000034596
Applies To
RSA Product Set: Security Analytics, NetWitness Logs and Packets
RSA Product/Service Type: Packet Decoder
RSA Version/Condition: 10.4.x, 10.5.x, 10.6.x
Platform: CentOS
O/S Version: EL6
Issue
Some HTTP packets are not parsed correctly.
The
View Text view in Investigation shows the HTTP request as encrypted data as shown below.
Image description
Resolution
The issue is caused when parsing HTTP/2 sessions as the current HTTP parser does not currently support
HTTP/2.