Protocols > HyperText Transfer Protocol (HTTP)

HTTP is the most used protocol on the internet by far, being the core protocol in use for viewing web pages, as well as being used by many other things for information dissemination.  I don't suppose I really need to get into too much detail about what HTTP is, because you should know that if you've gotten to the point of reading this document.  You want to know how to classify it.  Well, the way I'm classifying it is as follows.  All HTTP requests that I have found thus far follow a very simple format up front that keep you from having to do more complicated things down the road. Almost always the first actual data packet in a standard HTTP session will look something like this:

<Request Command> <Request Data> HTTP/<HTTP Version> <HTTP Options>

Now, if we know all the possible Request Commands and all the varying HTTP versions, we can thus know that anything looking like this is an HTTP Request of some sorts.  Further, using the parenting structure built into HiPPIE, we can then further analyze stuff built over the top of the HTTP protocol.  Here are the current sets of information built into the HiPPIE HTTP Classifier:

HTTP Request Commands

• GET
• POST
• HEAD

HTTP Versions

• 0.9
• 1.0
• 1.1