Which two HTTP header fields relate to intrusion analysis? (Choose two).