# Where to get detect-webapps log file?

**URL:** <https://community.zeek.org/t/where-to-get-detect-webapps-log-file/5742>\
**Category:** Zeek\
**Created:** [June 21, 2019, 10:50am UTC](https://community.zeek.org/t/where-to-get-detect-webapps-log-file/5742 "2019-06-21T10:50:08Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sachinji\_Giri](https://avatars.discourse-cdn.com/v4/letter/s/4491bb/32.png) [@Sachinji\_Giri](https://community.zeek.org/u/Sachinji_Giri)\
**Post date:** [June 21, 2019, 10:50am UTC](https://community.zeek.org/t/where-to-get-detect-webapps-log-file/5742/1 "2019-06-21T10:50:08Z")

</div>

Hi there,  
I am using zeek in a container with hosts network. My bro/zeek version is following. Bold text are the commands that get executed in the container.

# docker run --cap-add=NET\_RAW --net=host --rm blacktop/ **zeek --version**

bro version 2.6-255

I ran zeek with detect-webapps bro script from policy. I browsed a couple of phpadmin websites etc but _I could not get any logs specific to detect-webapps._

# docker run --cap-add=NET\_RAW --net=host --rm blacktop/ **zeek -i ‘enp2s0’ protocols/http/detect-webapps**

listening on enp2s0

---

<div class="post-metadata">

**Author:** ![Richard\_Bejtlich](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/richard_bejtlich/32/597_2.png) [@Richard\_Bejtlich](https://community.zeek.org/u/Richard_Bejtlich)\
**Post date:** [June 21, 2019, 4:10pm UTC](https://community.zeek.org/t/where-to-get-detect-webapps-log-file/5742/2 "2019-06-21T16:10:39Z")

</div>

Hello,

I don’t see a http.log. That implies that you may not have seen any HTTP traffic. Can you share a pcap of what you are watching?

Sincerely,

Richard

---

<div class="post-metadata">

**Author:** ![Sachinji\_Giri](https://avatars.discourse-cdn.com/v4/letter/s/4491bb/32.png) [@Sachinji\_Giri](https://community.zeek.org/u/Sachinji_Giri)\
**Post date:** [June 21, 2019, 4:15pm UTC](https://community.zeek.org/t/where-to-get-detect-webapps-log-file/5742/3 "2019-06-21T16:15:33Z")

</div>

Hi, sorry, there is http.log too. It got generated when browsed some of the data.

I am watching the interface with -i.

---

<div class="post-metadata">

**Author:** ![Sachinji\_Giri](https://avatars.discourse-cdn.com/v4/letter/s/4491bb/32.png) [@Sachinji\_Giri](https://community.zeek.org/u/Sachinji_Giri)\
**Post date:** [June 21, 2019, 4:18pm UTC](https://community.zeek.org/t/where-to-get-detect-webapps-log-file/5742/4 "2019-06-21T16:18:42Z")

</div>

\*browsed some http websites and then http.log appears. what exactly the detect web apps log look like or it is just a part of http.log?? i really don’t know.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/where-to-get-detect-webapps-log-file/5742/5 "2022-05-06T15:46:35Z")

</div>