Response view displays the information that is sent by the web server in response to the client's request. The response consists of the HTTP headers and the body of the response.
Response view features three modes
Full Response view
In Full Response view, the main window displays the HTML payload of the response.
A properly formed HTML response consists of the outermost enclosing HTML tags
(<html> and </html>), the
<head> and <body> tags, and all other components of an
HTML markup page.
Indexed Response view
Indexed view approximates the words of the response to be indexed. This view is useful for finding specific words for which you can search. Index view displays a close approximation of the searchable words.
Hexadecimal Display view
Hexadecimal Display view shows the hex values of the bytes in the response and the associated ASCII string values on the right side. This view is useful for looking for non-printing ASCII characters.
For example, the standard End Of Line characters in HTML pages, Carriage Return (hex
0A) and Line Feed (hex 0D), can be examined.
On the right side of Hexadecimal view, you can see the HTTP headers at the top, and you can see the End of Line pairs that are embedded in the response body.
The W3C standard specifies that each header line is separated by a Carriage Return-Line Feed (CRLF) pair, with two CRLFs in a row that indicate the end of the headers and the beginning of the body.
Creating events and hit attributes from the Response view
You can create events and hit attributes from the response. The hit attributes used for events can be any sequence of bytes found in the response.
To create an event from the response, find the pattern of bytes in the response view; right-click the highlighted section and select to create an event or hit attribute.
In Response view, you can find the entire string, including embedded tags, and create the event from there.