This had an invalid network-traffic SCO: it was missing protocols and src_ref/dst_ref. But the SCO had an http-request-ext extension, so I was able to infer the missing information from that.
Additionally, I could see that the extension was invalid: I think request_value is intended to be the URL path, not the whole URL, and request_version must be lowercase. So I fixed those things too.
This had an invalid
network-traffic
SCO: it was missing protocols and src_ref/dst_ref. But the SCO had an http-request-ext extension, so I was able to infer the missing information from that.Additionally, I could see that the extension was invalid: I think request_value is intended to be the URL path, not the whole URL, and request_version must be lowercase. So I fixed those things too.