Skip to content

Latest commit

 

History

History
30 lines (25 loc) · 1.36 KB

README.md

File metadata and controls

30 lines (25 loc) · 1.36 KB
Raw

mod_dumpost

Small apache module to log body content of request (POST / FORM data). Data are written to error log by default. For example:

[Sat Dec 08 09:58:24 2012] [info] [client 1.1.2.2] ------------------------------4bc4ed022729\r\nContent-Disposition: form-data; name="f"; filename="poc.html"\r\nContent-Type: text/html\r\n\r\n
[Sat Dec 08 09:58:43 2012] [info] [client 1.1.1.1] a=100

Note: You can do the same with mod_security, use this when you want a quick and lightweight solution.

Installation:

make
make install

Configuration:

In httpd.conf (optional):

  • DumpPostMaxSize 1024: limit the size of a log entry to 1024 bytes (default value: 1048576 i.e. 1MB)
  • DumpPostHeaderAdd Cookie Content-Type: add HTTP Header to log together with POST (default value: None)
  • DumpPostLogFile: specify a custom file to write the log entry (other than error log)
  • DumpPostLogBinary: [On/Off] Save binary requests data in hex string format.
  • DumpPostFilter: add a filter to match on first header of request, if no filter is present all traffic will be dumped.

Requirement:

  • apxs:
    • Ubuntu: sudo apt-get install apache2-threaded-dev, edit Makefile change apxs to apxs2
  • LogLevel of at least Info (not important if using DumpPostLogFile) use Debug to investigate common problems with files and request sizes.