Analyse HTTP traffic

This page outlines the methods available to analyse HTTP traffic.

To aid troubleshooting and show where generated traffic is sent, all related requests and responses are logged and can be viewed in the Burp Suite Logger.

Method 1: Automatic analysis via active scanning

1. Go to the AI scanner tab.

2. Configure the role and prompt template used for scan requests.

3. Confirm that Test request succeeds in Provider settings.

4. Click Scan: On to register the active scan check.

5. Send traffic to Burp's active scanner.

The extension resolves placeholders such as {REQUEST} and {RESPONSE} before sending the prompt to the configured model provider. See Use placeholder reference for the full list.

Method 2: Targeted manual analysis

1. Right-click on any request or response in Burp Suite.

2. Navigate to Extensions → BurpGPT Pro → Scan with AI (results in Target → Site map).

Using this approach, completion results will appear uniquely under the relevant entries in Target → Site map, as well as in the All issues section of Burp Suite.

Method 3: Interactive AI Chat

Open any HTTP request editor tab that supports extension editors, then select AI Chat. You can ask follow-up questions about the selected traffic and choose whether to include the current request, response, or both with your next message.

If analysis does not produce the expected output, see Troubleshooting.