I am recording an application which communicates Websockets for its communication.
I do see there are few session ids and cookie values in the action.c , and the same cookie and session are assigned by the tool at the time of recording to an array in websocketbuffer.h
I need to understand how to handle correlation for this values? where should i place the correlation function?
Also the session value is being passed into the header first and i am not finding the boundaries to place it .
Are there any videos that helps me to understand the webocket protocol.