http_method

The HTTP request method is accessible to rule writers via the http_method sticky buffer. Common values are GET, POST, OPTIONS, HEAD, DELETE, PUT, TRACE, and CONNECT.

Note: http_method matches are eligible for fast patterns, which is a change new to Snort 3.

Format:

http_method;

Examples:

http_method;
content:"POST";

http_method;
content:"GET",fast_pattern;