Re: Re: Help with execution of sqwebmail CGI
"Sujoy Ghosh" <[email protected]> 6 Jul 2004 05:22:26 -0000
| Newsgroups | gmane.mail.sqwebmail |
|---|---|
| Message-ID | <[email protected]> |
Hi Brian, Thanks for your reply. Pls find the tcpdump output as attached with this email. There are two files : tcpdump1 & tcpdump2 tcpdump1 -- the dump for the session which provides the save/open/cancle option while submitting the login info. tcpdump2 -- successful session. I.e from some PCs I can able to log in successfully. Note; both the session are on same server. Would be awaiting for your reply after you analyse the data. -regards Sujoy On Mon, 05 Jul 2004 Brian Candler wrote : >On Mon, Jul 05, 2004 at 12:46:07PM -0000, Sujoy Ghosh wrote: > > Recently I installed Sqwebmail-4.0.5 on a Redhat Linux 9, > > Apache/2.0.40. > > On submitting the user ID & password via the url > > http://server.com/cgi-bin/sqwebmail ;the web server is sending the > > content of the file with the option for (save/open/cancel)instead of > > executing the file. > >And if you click "save", what does the saved file contain? > > > No mention of any error in the httpd log file. > >It sounds like some disagreement between the browser and the CGI over MIME >types. You really need to get a HTTP dump of the session to debug what is >going on. Try running on the server: > > tcpdump -n -i eth0 -s1500 -X tcp port 80 and host x.x.x.x > >where x.x.x.x is the IP address of the client you are connecting from. Save >the output of the tcpdump in a file. You are looking for the point where the >server sends back a page after the login has been submitted, when you get >the "save/open/cancel" dialog box. > >Put the tcpdump output up on a web page somewhere, or post to the list, and >we'll have a look. > >If you're not sure where in the HTTP transaction your password is sent, then >change your password to a dummy value temporarily before making the tcpdump, >and change it back afterwards, to prevent your password being seen. > >Brian.
tcpdump1
(text/plain, 23.9 KB)
10:07:28.199679 203.197.123.95.1248 > 64.239.38.21.http: S 94480479:94480479(0) win 65535 <mss 1460,nop,nop,sackOK> (DF) 0x0000 4500 0030 2164 4000 6f06 3c3b cbc5 7b5f [email protected].<;..{_ 0x0010 40ef 2615 04e0 0050 05a1 a85f 0000 0000 @.&....P..._.... 0x0020 7002 ffff 21c6 0000 0204 05b4 0101 0402 p...!........... 10:07:28.199730 64.239.38.21.http > 203.197.123.95.1248: S 3175575047:3175575047(0) ack 94480480 win 5840 <mss 1460,nop,nop,sackOK> (DF) 0x0000 4500 0030 0000 4000 4006 8c9f 40ef 2615 E..0..@.@...@.&. 0x0010 cbc5 7b5f 0050 04e0 bd47 6e07 05a1 a860 ..{_.P...Gn....` 0x0020 7012 16d0 df95 0000 0204 05b4 0101 0402 p............... 10:07:29.313053 203.197.123.95.1248 > 64.239.38.21.http: . ack 1 win 65535 (DF) 0x0000 4500 0028 2166 4000 6f06 3c41 cbc5 7b5f E..([email protected].<A..{_ 0x0010 40ef 2615 04e0 0050 05a1 a860 bd47 6e08 @.&....P...`.Gn. 0x0020 5010 ffff 232a 0000 0000 0000 0000 P...#*........ 10:07:29.397778 203.197.123.95.1248 > 64.239.38.21.http: P 1:609(608) ack 1 win 65535 (DF) 0x0000 4500 0288 2167 4000 6f06 39e0 cbc5 7b5f [email protected]...{_ 0x0010 40ef 2615 04e0 0050 05a1 a860 bd47 6e08 @.&....P...`.Gn. 0x0020 5018 ffff b517 0000 504f 5354 202f 6367 P.......POST./cg 0x0030 692d 6269 6e2f 7371 7765 626d 6169 6c20 i-bin/sqwebmail. 0x0040 4854 5450 2f31 2e31 0d0a 4163 6365 7074 HTTP/1.1..Accept 0x0050 3a20 696d 6167 652f 6769 662c 2069 6d61 :.image/gif,.ima 0x0060 6765 2f78 2d78 6269 746d 6170 2c20 696d ge/x-xbitmap,.im 0x0070 6167 652f 6a70 6567 2c20 696d 6167 652f age/jpeg,.image/ 0x0080 706a 7065 672c 2061 7070 6c69 6361 7469 pjpeg,.applicati 0x0090 6f6e 2f76 6e64 2e6d 732d 706f 7765 7270 on/vnd.ms-powerp 0x00a0 6f69 6e74 2c20 6170 706c 6963 6174 696f oint,.applicatio 0x00b0 6e2f 766e 642e 6d73 2d65 7863 656c 2c20 n/vnd.ms-excel,. 0x00c0 6170 706c 6963 6174 696f 6e2f 6d73 776f application/mswo 0x00d0 7264 2c20 6170 706c 6963 6174 696f 6e2f rd,.application/ 0x00e0 782d 7368 6f63 6b77 6176 652d 666c 6173 x-shockwave-flas 0x00f0 682c 202a 2f2a 0d0a 5265 6665 7265 723a h,.*/*..Referer: 0x0100 2068 7474 703a 2f2f 6e77 732e 616c 6c69 .http://nws.alli 0x0110 6e64 6961 2e63 6f6d 2f63 6769 2d62 696e ndia.com/cgi-bin 0x0120 2f73 7177 6562 6d61 696c 3f6e 6f66 7261 /sqwebmail?nofra 0x0130 6d65 733d 310d 0a41 6363 6570 742d 4c61 mes=1..Accept-La 0x0140 6e67 7561 6765 3a20 656e 2d75 730d 0a43 nguage:.en-us..C 0x0150 6f6e 7465 6e74 2d54 7970 653a 2061 7070 ontent-Type:.app 0x0160 6c69 6361 7469 6f6e 2f78 2d77 7777 2d66 lication/x-www-f 0x0170 6f72 6d2d 7572 6c65 6e63 6f64 6564 0d0a orm-urlencoded.. 0x0180 4163 6365 7074 2d45 6e63 6f64 696e 673a Accept-Encoding: 0x0190 2067 7a69 702c 2064 6566 6c61 7465 0d0a .gzip,.deflate.. 0x01a0 5573 6572 2d41 6765 6e74 3a20 4d6f 7a69 User-Agent:.Mozi 0x01b0 6c6c 612f 342e 3020 2863 6f6d 7061 7469 lla/4.0.(compati 0x01c0 626c 653b 204d 5349 4520 362e 303b 2057 ble;.MSIE.6.0;.W 0x01d0 696e 646f 7773 204e 5420 352e 3029 0d0a indows.NT.5.0).. 0x01e0 486f 7374 3a20 6e77 732e 616c 6c69 6e64 Host:.nws.allind 0x01f0 6961 2e63 6f6d 0d0a 436f 6e74 656e 742d ia.com..Content- 0x0200 4c65 6e67 7468 3a20 3733 0d0a 436f 6e6e Length:.73..Conn 0x0210 6563 7469 6f6e 3a20 4b65 6570 2d41 6c69 ection:.Keep-Ali 0x0220 7665 0d0a 4361 6368 652d 436f 6e74 726f ve..Cache-Contro 0x0230 6c3a 206e 6f2d 6361 6368 650d 0a0d 0a75 l:.no-cache....u 0x0240 7365 726e 616d 653d 7375 6a6f 7940 616c sername=sujoy@al 0x0250 6c69 6e64 6961 2e63 6f2e 696e 2670 6173 lindia.co.in&pas 0x0260 7377 6f72 643d 6865 6c6c 6f26 646f 2e6c sword=hello&do.l 0x0270 6f67 696e 3d4c 6f67 696e 2674 696d 657a ogin=Login&timez 0x0280 6f6e 656c 6973 743d onelist= 10:07:29.397810 64.239.38.21.http > 203.197.123.95.1248: . ack 609 win 6688 (DF) 0x0000 4500 0028 8aae 4000 4006 01f9 40ef 2615 E..(..@.@...@.&. 0x0010 cbc5 7b5f 0050 04e0 bd47 6e08 05a1 aac0 ..{_.P...Gn..... 0x0020 5010 1a20 06aa 0000 P....... 10:07:29.511891 64.239.38.21.http > 203.197.123.95.1248: P 1:566(565) ack 609 win 6688 (DF) 0x0000 4500 025d 8aaf 4000 4006 ffc2 40ef 2615 E..]..@.@...@.&. 0x0010 cbc5 7b5f 0050 04e0 bd47 6e08 05a1 aac0 ..{_.P...Gn..... 0x0020 5018 1a20 cb2e 0000 4854 5450 2f31 2e31 P.......HTTP/1.1 0x0030 2033 3033 204d 6f76 6564 0d0a 4461 7465 .303.Moved..Date 0x0040 3a20 5475 652c 2030 3620 4a75 6c20 3230 :.Tue,.06.Jul.20 0x0050 3034 2030 343a 3337 3a32 3920 474d 540d 04.04:37:29.GMT. 0x0060 0a53 6572 7665 723a 2041 7061 6368 652f .Server:.Apache/ 0x0070 322e 302e 3430 2028 5265 6420 4861 7420 2.0.40.(Red.Hat. 0x0080 4c69 6e75 7829 0d0a 4361 6368 652d 436f Linux)..Cache-Co 0x0090 6e74 726f 6c3a 206e 6f2d 7374 6f72 650d ntrol:.no-store. 0x00a0 0a50 7261 676d 613a 206e 6f2d 6361 6368 .Pragma:.no-cach 0x00b0 650d 0a4c 6f63 6174 696f 6e3a 2068 7474 e..Location:.htt 0x00c0 703a 2f2f 6e77 732e 616c 6c69 6e64 6961 p://nws.allindia 0x00d0 2e63 6f6d 2f63 6769 2d62 696e 2f73 7177 .com/cgi-bin/sqw 0x00e0 6562 6d61 696c 2f6c 6f67 696e 2f73 756a ebmail/login/suj 0x00f0 6f79 2534 3061 6c6c 696e 6469 612e 636f oy%40allindia.co 0x0100 2e69 6e2e 6175 7468 6461 656d 6f6e 2f35 .in.authdaemon/5 0x0110 4435 4536 4646 4338 3230 3634 3841 3133 D5E6FFC820648A13 0x0120 3231 3742 3045 3435 4145 4533 4635 332f 217B0E45AEE3F53/ 0x0130 3130 3839 3038 3836 3439 3f66 6f6c 6465 1089088649?folde 0x0140 723d 494e 424f 5826 666f 726d 3d66 6f6c r=INBOX&form=fol 0x0150 6465 7273 0d0a 436f 6e6e 6563 7469 6f6e ders..Connection 0x0160 3a20 636c 6f73 650d 0a54 7261 6e73 6665 :.close..Transfe 0x0170 722d 456e 636f 6469 6e67 3a20 6368 756e r-Encoding:.chun 0x0180 6b65 640d 0a43 6f6e 7465 6e74 2d54 7970 ked..Content-Typ 0x0190 653a 2074 6578 742f 706c 6169 6e3b 2063 e:.text/plain;.c 0x01a0 6861 7273 6574 3d49 534f 2d38 3835 392d harset=ISO-8859- 0x01b0 310d 0a0d 0a39 640d 0a55 5249 3a20 6874 1....9d..URI:.ht 0x01c0 7470 3a2f 2f6e 7773 2e61 6c6c 696e 6469 tp://nws.allindi 0x01d0 612e 636f 6d2f 6367 692d 6269 6e2f 7371 a.com/cgi-bin/sq 0x01e0 7765 626d 6169 6c2f 6c6f 6769 6e2f 7375 webmail/login/su 0x01f0 6a6f 7925 3430 616c 6c69 6e64 6961 2e63 joy%40allindia.c 0x0200 6f2e 696e 2e61 7574 6864 6165 6d6f 6e2f o.in.authdaemon/ 0x0210 3544 3545 3646 4643 3832 3036 3438 4131 5D5E6FFC820648A1 0x0220 3332 3137 4230 4534 3541 4545 3346 3533 3217B0E45AEE3F53 0x0230 2f31 3038 3930 3838 3634 393f 666f 6c64 /1089088649?fold 0x0240 6572 3d49 4e42 4f58 2666 6f72 6d3d 666f er=INBOX&form=fo 0x0250 6c64 6572 730a 0d0a 300d 0a0d 0a lders...0.... 10:07:29.512969 64.239.38.21.http > 203.197.123.95.1248: F 566:566(0) ack 609 win 6688 (DF) 0x0000 4500 0028 8ab0 4000 4006 01f7 40ef 2615 E..(..@.@...@.&. 0x0010 cbc5 7b5f 0050 04e0 bd47 703d 05a1 aac0 ..{_.P...Gp=.... 0x0020 5011 1a20 0474 0000 P....t.. 10:07:31.690094 203.197.123.95.1248 > 64.239.38.21.http: F 609:609(0) ack 566 win 64970 (DF) 0x0000 4500 0028 2169 4000 6f06 3c3e cbc5 7b5f E..([email protected].<>..{_ 0x0010 40ef 2615 04e0 0050 05a1 aac0 bd47 703d @.&....P.....Gp= 0x0020 5011 fdca 20c9 0000 0000 0000 0000 P............. 10:07:31.690134 64.239.38.21.http > 203.197.123.95.1248: . ack 610 win 6688 (DF) 0x0000 4500 0028 8ab1 4000 4006 01f6 40ef 2615 E..(..@.@...@.&. 0x0010 cbc5 7b5f 0050 04e0 bd47 703e 05a1 aac1 ..{_.P...Gp>.... 0x0020 5010 1a20 0473 0000 P....s.. 10:07:31.697868 203.197.123.95.1249 > 64.239.38.21.http: S 95391033:95391033(0) win 65535 <mss 1460,nop,nop,sackOK> (DF) 0x0000 4500 0030 216a 4000 6f06 3c35 cbc5 7b5f [email protected].<5..{_ 0x0010 40ef 2615 04e1 0050 05af 8d39 0000 0000 @.&....P...9.... 0x0020 7002 ffff 3cdd 0000 0204 05b4 0101 0402 p...<........... 10:07:31.697898 64.239.38.21.http > 203.197.123.95.1249: S 3180767185:3180767185(0) ack 95391034 win 5840 <mss 1460,nop,nop,sackOK> (DF) 0x0000 4500 0030 0000 4000 4006 8c9f 40ef 2615 E..0..@.@...@.&. 0x0010 cbc5 7b5f 0050 04e1 bd96 a7d1 05af 8d3a ..{_.P.........: 0x0020 7012 16d0 c093 0000 0204 05b4 0101 0402 p............... 10:07:31.703253 203.197.123.95.1248 > 64.239.38.21.http: . ack 567 win 64970 (DF) 0x0000 4500 0028 216c 4000 6f06 3c3b cbc5 7b5f E..([email protected].<;..{_ 0x0010 40ef 2615 04e0 0050 05a1 aac1 bd47 703e @.&....P.....Gp> 0x0020 5010 fdca 20c8 0000 0000 0000 0000 P............. 10:07:32.919038 203.197.123.95.1249 > 64.239.38.21.http: . ack 1 win 65535 (DF) 0x0000 4500 0028 216d 4000 6f06 3c3a cbc5 7b5f E..([email protected].<:..{_ 0x0010 40ef 2615 04e1 0050 05af 8d3a bd96 a7d2 @.&....P...:.... 0x0020 5010 ffff 0428 0000 0000 0000 0000 P....(........ 10:07:32.998711 203.197.123.95.1249 > 64.239.38.21.http: P 1:576(575) ack 1 win 65535 (DF) 0x0000 4500 0267 216e 4000 6f06 39fa cbc5 7b5f [email protected]...{_ 0x0010 40ef 2615 04e1 0050 05af 8d3a bd96 a7d2 @.&....P...:.... 0x0020 5018 ffff 8464 0000 4745 5420 2f63 6769 P....d..GET./cgi 0x0030 2d62 696e 2f73 7177 6562 6d61 696c 2f6c -bin/sqwebmail/l 0x0040 6f67 696e 2f73 756a 6f79 2534 3061 6c6c ogin/sujoy%40all 0x0050 696e 6469 612e 636f 2e69 6e2e 6175 7468 india.co.in.auth 0x0060 6461 656d 6f6e 2f35 4435 4536 4646 4338 daemon/5D5E6FFC8 0x0070 3230 3634 3841 3133 3231 3742 3045 3435 20648A13217B0E45 0x0080 4145 4533 4635 332f 3130 3839 3038 3836 AEE3F53/10890886 0x0090 3439 3f66 6f6c 6465 723d 494e 424f 5826 49?folder=INBOX& 0x00a0 666f 726d 3d66 6f6c 6465 7273 2048 5454 form=folders.HTT 0x00b0 502f 312e 310d 0a41 6363 6570 743a 2069 P/1.1..Accept:.i 0x00c0 6d61 6765 2f67 6966 2c20 696d 6167 652f mage/gif,.image/ 0x00d0 782d 7862 6974 6d61 702c 2069 6d61 6765 x-xbitmap,.image 0x00e0 2f6a 7065 672c 2069 6d61 6765 2f70 6a70 /jpeg,.image/pjp 0x00f0 6567 2c20 6170 706c 6963 6174 696f 6e2f eg,.application/ 0x0100 766e 642e 6d73 2d70 6f77 6572 706f 696e vnd.ms-powerpoin 0x0110 742c 2061 7070 6c69 6361 7469 6f6e 2f76 t,.application/v 0x0120 6e64 2e6d 732d 6578 6365 6c2c 2061 7070 nd.ms-excel,.app 0x0130 6c69 6361 7469 6f6e 2f6d 7377 6f72 642c lication/msword, 0x0140 2061 7070 6c69 6361 7469 6f6e 2f78 2d73 .application/x-s 0x0150 686f 636b 7761 7665 2d66 6c61 7368 2c20 hockwave-flash,. 0x0160 2a2f 2a0d 0a52 6566 6572 6572 3a20 6874 */*..Referer:.ht 0x0170 7470 3a2f 2f6e 7773 2e61 6c6c 696e 6469 tp://nws.allindi 0x0180 612e 636f 6d2f 6367 692d 6269 6e2f 7371 a.com/cgi-bin/sq 0x0190 7765 626d 6169 6c3f 6e6f 6672 616d 6573 webmail?noframes 0x01a0 3d31 0d0a 4163 6365 7074 2d4c 616e 6775 =1..Accept-Langu 0x01b0 6167 653a 2065 6e2d 7573 0d0a 4163 6365 age:.en-us..Acce 0x01c0 7074 2d45 6e63 6f64 696e 673a 2067 7a69 pt-Encoding:.gzi 0x01d0 702c 2064 6566 6c61 7465 0d0a 5573 6572 p,.deflate..User 0x01e0 2d41 6765 6e74 3a20 4d6f 7a69 6c6c 612f -Agent:.Mozilla/ 0x01f0 342e 3020 2863 6f6d 7061 7469 626c 653b 4.0.(compatible; 0x0200 204d 5349 4520 362e 303b 2057 696e 646f .MSIE.6.0;.Windo 0x0210 7773 204e 5420 352e 3029 0d0a 486f 7374 ws.NT.5.0)..Host 0x0220 3a20 6e77 732e 616c 6c69 6e64 6961 2e63 :.nws.allindia.c 0x0230 6f6d 0d0a 436f 6e6e 6563 7469 6f6e 3a20 om..Connection:. 0x0240 4b65 6570 2d41 6c69 7665 0d0a 4361 6368 Keep-Alive..Cach 0x0250 652d 436f 6e74 726f 6c3a 206e 6f2d 6361 e-Control:.no-ca 0x0260 6368 650d 0a0d 0a che.... 10:07:32.998744 64.239.38.21.http > 203.197.123.95.1249: . ack 576 win 6900 (DF) 0x0000 4500 0028 41dd 4000 4006 4aca 40ef 2615 E..(A.@[email protected].@.&. 0x0010 cbc5 7b5f 0050 04e1 bd96 a7d2 05af 8f79 ..{_.P.........y 0x0020 5010 1af4 e6f4 0000 P....... 10:07:33.021521 64.239.38.21.http > 203.197.123.95.1249: . 1:1461(1460) ack 576 win 6900 (DF) 0x0000 4500 05dc 41de 4000 4006 4515 40ef 2615 E...A.@[email protected].@.&. 0x0010 cbc5 7b5f 0050 04e1 bd96 a7d2 05af 8f79 ..{_.P.........y 0x0020 5010 1af4 3f26 0000 4854 5450 2f31 2e31 P...?&..HTTP/1.1 0x0030 2032 3030 204f 4b0d 0a44 6174 653a 2054 .200.OK..Date:.T 0x0040 7565 2c20 3036 204a 756c 2032 3030 3420 ue,.06.Jul.2004. 0x0050 3034 3a33 373a 3332 2047 4d54 0d0a 5365 04:37:32.GMT..Se 0x0060 7276 6572 3a20 4170 6163 6865 2f32 2e30 rver:.Apache/2.0 0x0070 2e34 3020 2852 6564 2048 6174 204c 696e .40.(Red.Hat.Lin 0x0080 7578 290d 0a43 6f6e 7465 6e74 2d4c 616e ux)..Content-Lan 0x0090 6775 6167 653a 2065 6e2d 7573 0d0a 4361 guage:.en-us..Ca 0x00a0 6368 652d 436f 6e74 726f 6c3a 206e 6f2d che-Control:.no- 0x00b0 7374 6f72 650d 0a50 7261 676d 613a 206e store..Pragma:.n 0x00c0 6f2d 6361 6368 650d 0a56 6172 793a 2041 o-cache..Vary:.A 0x00d0 6363 6570 742d 4c61 6e67 7561 6765 2c41 ccept-Language,A 0x00e0 6363 6570 742d 456e 636f 6469 6e67 0d0a ccept-Encoding.. 0x00f0 436f 6e74 656e 742d 456e 636f 6469 6e67 Content-Encoding 0x0100 3a20 677a 6970 0d0a 436f 6e74 656e 742d :.gzip..Content- 0x0110 456e 636f 6469 6e67 3a20 677a 6970 0d0a Encoding:.gzip.. 0x0120 436f 6e74 656e 742d 4c65 6e67 7468 3a20 Content-Length:. 0x0130 3234 3238 0d0a 436f 6e6e 6563 7469 6f6e 2428..Connection 0x0140 3a20 636c 6f73 650d 0a43 6f6e 7465 6e74 :.close..Content 0x0150 2d54 7970 653a 2074 6578 742f 6874 6d6c -Type:.text/html 0x0160 3b20 6368 6172 7365 743d 7574 662d 380d ;.charset=utf-8. 0x0170 0a0d 0a1f 8b08 0000 0000 0000 0301 6509 ..............e. 0x0180 9af6 1f8b 0800 8d2c ea40 0003 ed1b 6b73 .......,[email protected] 0x0190 db36 f2bb 7e05 4ad7 bd76 2622 295b 4e6d .6..~.J..v&")[Nm 0x01a0 8762 ea87 72cd 8c93 786c 75ae 9d9b 9b1b .b..r...xlu..... 0x01b0 8884 459e 4942 2521 cbba b91f 7f0b 800f ..E.IB%!........ 0x01c0 9004 f5f0 b969 2e09 672c 8920 b1bb d8f7 .....i..g,...... 0x01d0 2e60 e7f5 631c a107 9266 214d 46c6 c0b4 .`..c....f!MF... 0x01e0 0d44 128f fa61 321b 190b 76d7 3f36 5ebb .D...a2...v.?6^. 0x01f0 3de7 9bcb 0f17 93df aec7 2860 f0fe f52f =.........(`.../ 0x0200 e757 6f2f 90d1 b7ac bf1d 5e58 d6e5 e412 .Wo/......^X.... 0x0210 fdfa f3e4 dd15 0200 6892 e224 0b19 00c4 ........h..$.... 0x0220 9165 8ddf 1b3d 242e 2360 6c7e 6a59 cbe5 .e...=$.#`l~jY.. 0x0230 d25c 1e9a 349d 5993 1beb 9143 1c70 10f9 .\..4.Y....C.p.. 0x0240 cf3e 53e6 9b3e f30d c02f d002 a949 36d2 .>S..>.../...I6. 0x0250 8019 9c9c 9cc8 d9e2 5d82 7d17 703a 3161 ........].}.p:1a 0x0260 1825 3826 23e3 afe3 f7e3 9bb3 c987 1b03 .%8&#........... 0x0270 7934 6124 6123 03c7 7885 d1b1 69bf 4019 y4a$a#..x...i.@. 0x0280 21a8 0df6 8cbf 6019 c86a 427b 777b 1be3 !.....`..jB{w{.. 0x0290 944d f02c bb4e c903 40bb c6c0 c164 a640 .M.,[email protected].@ 0x02a0 9fdc fc32 2ea6 b290 45c4 7d43 231f 18ed ...2....E.}C#... 0x02b0 58f2 963f 88c2 e41e a524 1a19 195b 4524 X..?.....$...[E$ 0x02c0 0b08 6106 62ab 3920 61e4 9159 5e96 1928 ..a.b.9.a..Y^..( 0x02d0 48c9 ddc8 b096 641a e330 b2b2 dff3 5fa6 H.....d..0...._. 0x02e0 782a 517c d3ef a36f dffa a7e8 4e62 3139 x*Q|...o....Nb19 0x02f0 375e 3c80 4086 3fa2 03db 1e5a f681 7570 7^<.@.?....Z..up 0x0300 886c fbd4 1e9e da47 284e 331c a3f1 e31c .l.....G(N3..... 0x0310 7d8b fa7d 609b 25f9 d673 a6d4 5f71 91f7 }..}`.%..s.._q.. 0x0320 fbbd 3517 9fd3 73fc f001 e128 9c81 ee78 ..5...s....(...x 0x0330 b06c 921a 7226 9ad0 39fa 1900 92d4 44b7 .l..r&..9.....D. 0x0340 015d 6639 6128 0a33 8670 e223 c297 80b0 .]f9a(.3.p.#.... 0x0350 efa7 24cb 4c24 e131 3c8d 08f2 4814 cde1 ..$.L$.1<...H... 0x0360 8950 42d0 487e 9fcd b157 dc4f 690a a0c4 .PB.H~...W.Oi... 0x0370 cf65 e8b3 6064 9c1c ed1b 92d5 927a ae6f .e..`d.......z.o 0x0380 0e4b 9160 ebc8 003e 937e 40c2 59c0 4e91 .K.`...>[email protected]. 0x0390 6db8 b946 3acc 2fa8 8fc8 1d70 fe21 bf63 m..F:./....p.!.c 0x03a0 745e 682d ea82 e184 f10c 65a9 a748 6696 t^h-......e..Hf. 0x03b0 e215 4ce5 b0cc 39d7 8682 bcc1 00a4 28a6 ..L...9.......(. 0x03c0 8adf 2568 1cc1 406d 3d96 0bfa e1ab 044e ..%h..@m=......N 0x03d0 671e 8d28 3cdd f3c4 05ec 8870 0676 c0b1 g..(<......p.v.. 0x03e0 4de9 a3d1 9a91 2f22 e5f8 9e6b 4d02 d873 M...../"...kM..s 0x03f0 2c0a 7ea5 957c 362f ae5a 97fb 5d32 cde6 ,.~..|6/.Z..]2.. 0x0400 af76 e64f 49af 6def 97f0 f85c a16b ea43 .v.OI.m....\.k.C 0x0410 95e6 a6ce 3574 b282 5357 ba6a 2cad 0f68 ....5t..SW.j,..h 0x0420 b4ad 86ba 1053 1cfa 7e44 8cc6 dc7c 4973 .....S..~D...|Is 0x0430 3c23 81b0 2a43 7127 fe1a 4c0d 25c8 a1bb <#..*Cq'..L.%... 0x0440 d9e2 5f74 f513 8e40 01fc 109b 1e35 c3a4 [email protected].. 0x0450 0da9 9255 795f 5f29 0c70 2696 e2a8 8ba6 ...Uy__).p&..... 0x0460 25b0 baec 9f68 9b53 ca18 8d3b 7555 3ed6 %....h.S...;uU>. 0x0470 9a60 49b6 a2b5 1fd5 04b7 225d 6f69 4fa0 .`I......."]oiO. 0x0480 bde0 7629 b552 5ac2 438f c107 d33b c551 ..v).RZ.C....;.Q 0x0490 cb30 c01f dd12 8f87 5ff0 cab9 92bd 4017 .0......_.....@. 0x04a0 29c1 8ca0 77e0 ab41 0761 0002 df1d 4921 )...w..A.a....I! 0x04b0 57e0 3763 e6d5 3db8 e296 15f2 341e 5a65 W.7c..=.....4.Ze 0x04c0 5a43 499b 81c5 c115 1344 44cc 2376 b2cc ZCI......DD.#v.. 0x04d0 4c45 9363 cb9b 85fd 6998 5481 d28a e88c LE.c....i.T..... 0x04e0 df73 a5df 1fda 75b5 37f1 8205 3e26 314d .s....u.7...>&1M 0x04f0 aca3 cba3 f1cb 376f 2e8e 0fec 97c3 e3b3 ......7o........ 0x0500 c1e1 c1e0 c773 7b3c 3c3a 1b8f 0fdf 1c1d .....s{<<:...... 0x0510 5a03 fbf8 c43e 3e7e 393c 792d e3d9 e8ed Z....>>~9<y-.... 0x0520 fbf3 0fbf 7e87 e3f9 ab3b 9ac6 a33c fc2a ....~....;...<.* 0x0530 e689 5bca b169 9d6d edc8 c85c 6a84 90f8 ..[..i.m...\j... 0x0540 7f74 3afa 7fce bc84 2ce3 6c36 1a54 9c94 .t:.....,.l6.T.. 0x0550 2386 2b35 4fba 925c fdbe 3275 078d 9c57 #.+5O..\..2u...W 0x0560 866a b88a d57e 65e2 0e4c c453 4aef 79ea .j...~e..L.SJ.y. 0x0570 6ab8 6732 6395 0a79 0ec3 1f87 91dc 2f0b j.g2c..y....../. 0x0580 17db 71bf 0da3 3f61 0603 26ba 6055 9863 ..q...?a..&.`U.c 0x0590 389d 1160 c43f e718 d415 d87e 4567 92e5 8..`.?.....~Eg.. 0x05a0 1f16 acce f1ee 3887 d440 77c5 0b0f f8de ......8..@w..... 0x05b0 26b8 95f1 4c42 3817 110c e194 2e00 160b &...LB8......... 0x05c0 4851 65c9 6aa6 7a51 e028 9e89 78d8 HQe.j.zQ.(..x. 10:07:33.021545 64.239.38.21.http > 203.197.123.95.1249: P 1461:2760(1299) ack 576 win 6900 (DF) 0x0000 4500 053b 41df 4000 4006 45b5 40ef 2615 E..;A.@[email protected].@.&. 0x0010 cbc5 7b5f 0050 04e1 bd96 ad86 05af 8f79 ..{_.P.........y 0x0020 5018 1af4 c6ed 0000 0b0a fe64 4140 34ee P..........dA@4. 0x0030 35b3 6011 aff3 dc06 f29a 7e16 03aa 3e08 5.`.......~...>. 0x0040 06f4 a733 3916 c949 2d3d 1e18 457c 57d3 ...39..I-=..E|W. 0x0050 c55a 4aec d473 4d5d 329e d321 d929 6caf .ZJ..sM]2..!.)l. 0x0060 8e77 a826 c935 fcc3 66d2 a122 6ae7 eada .w.&.5..f.."j... 0x0070 6c5d 92d8 34b3 da73 4df1 fb1b 5d80 9a10 l]..4..sM...]... 0x0080 b4e0 dd00 64ef 7385 5bd1 458a 7e5f 5086 ....d.s.[.E.~_P. 0x0090 4dc7 8239 82ef 6d64 8201 db16 20c3 6681 M..9..md......f. 0x00a0 c0af f5dc eb17 8583 6666 175f d6f2 47e1 ........ff._..G. 0x00b0 532d 53cf d3fe aecf 4e38 d21c 75f5 8c16 S-S.....N8..u... 0x00c0 97cc addd 3db0 2d69 b62a 9275 509a 554d ....=.-i.*.uP.UM 0x00d0 ed49 1717 1a95 4eed 11ef 94b4 87b9 dbc9 .I....N......... 0x00e0 7b1e 604a 4834 7d32 cd7b 1dca 25da 2fed {.`JH4}2.{..%./. 0x00f0 f15b 708c a58b d1bd d001 6e73 b15b ead6 .[p.......ns.[.. 0x0100 8146 f75a a608 5e16 b8b8 b681 f2a9 041c .F.Z..^......... 0x0110 258a 7b51 7e53 8520 6d30 be27 ab7a 0576 %.{Q~S..m0.'.z.v 0x0120 a0f6 3a5e e641 3a8f 1f86 94ed c8b8 2669 ..:^.A:.......&i 0x0130 1c66 bc93 9ab5 8a32 5c14 c36d 6492 9aad .f.....2\..md... 0x0140 f195 e88a 5bab 049d cc17 2cef 1ea6 d80f ....[.....,..... 0x0150 a991 f72b 2fc7 57e3 c958 4867 01b7 72dd ...+/.W..XHg..r. 0x0160 d53c dc94 6f72 6f7c 6292 9394 6984 27be .<..oro|b...i.'. 0x0170 387b 1104 da84 b535 7591 4070 f78d a2db 8{.....5u.@p.... 0x0180 200a f953 b477 6cf3 0b86 c37f c368 1f22 ...S.wl......h." 0x0190 d6f7 0324 df2d 1dca 0f8e c561 ca54 637d ...$.-.....a.Tc} 0x01a0 63cd 75c0 5c92 3a76 0fd2 9626 5a5b a275 c.u.\.:v...&Z[.u 0x01b0 078e c527 b82d 9f25 9dd3 e762 5ce6 658a ...'.-.%...b\.e. 0x01c0 ef58 f6a5 da58 b1fc cfc1 d44a 51ca ef32 .X...X.....JQ..2 0x01d0 057f 5ebb b0bf 10bb b815 35cd 176a 1562 ..^.......5..j.b 0x01e0 f19f 854d 4831 f2cf aff6 f03f d9c3 24c5 ...MH1.....?..$. 0x01f0 59f0 c51a 845c fd67 6111 b920 c5d7 9f67 Y....\.ga......g 0x0200 1375 60d9 62ea 87bc 01d6 2c54 3b35 207b .u`.b.....,T;5.{ 0x0210 82ca 95f7 20c6 197b 55fe 1522 fd14 e597 .......{U..".... 0x0220 b504 a80c 00cf 46fb 0787 5980 53e2 03b3 ......F...Y.S... 0x0230 48ec 5e2f a651 e815 8d33 c782 2155 c8ae H.^/.Q...3..!U.. 0x0240 4618 b55e 9cae 60ad eae4 5dea 59d9 4869 F..^..`...].Y.Hi 0x0250 0f6b 3643 5be5 bea6 cc6f 95f7 b5de 6bb5 .k6C[....o....k. 0x0260 6d59 cd54 6638 d354 3985 710d 862f 54b6 mY.Tf8.T9.q../T. 0x0270 e817 7aa2 bb68 f924 228c 34ba 8365 65fe ..z..h.$".4..ee. 0x0280 f423 0f9a 36db 86ad d50d 071f 7466 3105 .#..6.......tf1. 0x0290 6fd5 75b2 4161 e32e 1bab cdad d593 13cf o.u.Aa.......... 0x02a0 bbbb abda 8f80 51ec de37 bbda b5dd fc36 ......Q..7.....6 0x02b0 40fd d2eb ee47 a178 cb85 6f3e fe90 af57 @....G.x..o>...W 0x02c0 01dd bda5 6ca9 fb9e e98e 0c79 0e26 6a5a ....l......y.&jZ 0x02d0 af5d dda0 61d7 f989 b6e6 55a3 fa6e eaf6 .]..a.....U..n.. 0x02e0 a71f dc2e 6771 4951 4219 4ac1 f33d 90a2 ....gqIQB.J..=.. 0x02f0 131f d125 efb6 7ad4 272f d032 08bd 0079 ...%..z.'/.2...y 0x0300 7891 914c 69d5 c314 1e80 732b d440 16c7 x..Li.....s+.@.. 0x0310 d718 4553 82e4 3b3e 8745 1234 4de9 5274 ..ES..;>.E.4M.Rt 0x0320 7339 30e9 0c0b 9841 4852 9c7a c1ca d4d1 s90....AHR.z.... 0x0330 baf7 8f2e 7fa6 7368 7317 d5b2 8600 3841 ......shs.....8A 0x0340 9222 6de0 3ebb 4c1a 8a3d 660d 1850 b475 ."m.>.L..=f..P.u 0x0350 4064 9652 6b03 6981 dc08 6649 6fce e869 @d.Rk.i...fIo..i 0x0360 eed6 33e0 8bc7 7260 929f 8ce6 40dd 9e43 ..3...r`[email protected] 0x0370 e77c 57a3 9ed9 18ee f7c8 344d f483 63c9 .|W.......4M..c. 0x0380 c77c 7746 c271 7b9a 5c89 1f7a d391 24db .|wF.q{.\..z..$. 0x0390 343c f6d6 b1f3 4f03 c5f8 3122 c94c a8d3 4<....O...1".L.. 0x03a0 c171 9548 211d a355 7490 19c4 212b 3922 .q.H!..Ut...!+9" 0x03b0 978d 0a3e 4954 3e35 25b6 0e7e 5bf3 2e81 ...>IT>5%..~[... 0x03c0 ee88 fd52 0d10 0a76 a98e 7aec 390b 233c ...R...v..z.9.#< 0x03d0 2551 5df4 5e40 bc7b 61fb 3920 0125 3f9e %Q].^@.{a.9..%?. 0x03e0 b80e 588d 8ce2 3c23 c4fa 1c87 a55f 5787 ..X...<#....._W. 0x03f0 bdfe 7def 75b7 196c 0fe6 acda 7653 8c1d ..}.u..l....vS.. 0x0400 cd08 cb10 18ba 8fc2 2463 bc75 272c 7649 ........$c.u',vI 0x0410 fe92 1218 522d b634 551d f8ed 095c 9bc5 ....R-.4U....\.. 0x0420 4c23 ecdd e78e b408 fed5 0ec0 3320 91cd L#..........3... 0x0430 7f99 4fa0 842c 0be8 dc3b 3c03 f8cf c4b9 ..O..,...;<..... 0x0440 3e65 77ed 8fdc 14cb 37aa 2e9a 623b ddbc >ew.....7...b;.. 0x0450 5595 6f42 b63c 64cb 1f4a 885d 5eaa b8da U.oB.<d..J.]^... 0x0460 7e72 33f2 6d89 5c83 769d d393 5c59 4774 ~r3.m.\.v...\YGt 0x0470 e907 a5de 1b1d 316e 2304 6d08 7d3a 304d ......1n#.m.}:0M 0x0480 28dd c0cf ee7d c7a7 ea12 0bc2 e25c 7559 (....}.......\uY 0x0490 8374 5de0 0eb9 ea41 5107 b197 a6ab 6db5 .t]....AQ.....m. 0x04a0 8fd7 32bc dc1e 1987 46b3 7ade 2270 1757 ..2.....F.z."p.W 0x04b0 5361 818e aed8 fdb1 f76e 85ef d63b d51d Sa.......n...;.. 0x04c0 c3d4 4ed1 ee8f a955 9f52 4434 ea91 a757 ..N....U.RD4...W 0x04d0 8f6b ceb7 4ac4 9b8f e67e 941a 5203 63e7 .k..J....~..R.c. 0x04e0 03bb d582 361c d8dd f1b8 f1da 5e03 df90 ....6.......^... 0x04f0 4ce3 fa01 5e88 c98c 8736 7fc5 55b6 7d32 L...^....6..U.}2 0x0500 497d 778b 834c eaeb 60d3 900c 1044 172c I}w..L..`....D., 0x0510 0b21 df92 5174 87b7 f2e3 2e90 0b8b bcd1 .!..Qt.......... 0x0520 b18a 035a fcbf 53dc de7f 0148 332a 7b7e ...Z..S....H3*{~ 0x0530 3400 0087 0f90 1165 0900 00 4......e... 10:07:33.023948 64.239.38.21.http > 203.197.123.95.1249: F 2760:2760(0) ack 576 win 6900 (DF) 0x0000 4500 0028 41e0 4000 4006 4ac7 40ef 2615 E..(A.@[email protected].@.&. 0x0010 cbc5 7b5f 0050 04e1 bd96 b299 05af 8f79 ..{_.P.........y 0x0020 5011 1af4 dc2c 0000 P....,.. 10:07:35.277233 203.197.123.95.1249 > 64.239.38.21.http: . ack 1461 win 65535 (DF) 0x0000 4500 0028 2170 4000 6f06 3c37 cbc5 7b5f E..([email protected].<7..{_ 0x0010 40ef 2615 04e1 0050 05af 8f79 bd96 ad86 @.&....P...y.... 0x0020 5010 ffff fc34 0000 0000 0000 0000 P....4........ 10:07:35.283080 203.197.123.95.1249 > 64.239.38.21.http: . ack 2761 win 64236 (DF) 0x0000 4500 0028 2172 4000 6f06 3c35 cbc5 7b5f E..([email protected].<5..{_ 0x0010 40ef 2615 04e1 0050 05af 8f79 bd96 b29a @.&....P...y.... 0x0020 5010 faec fc33 0000 0000 0000 0000 P....3........ 10:07:35.289143 203.197.123.95.1249 > 64.239.38.21.http: F 576:576(0) ack 2761 win 64236 (DF) 0x0000 4500 0028 2173 4000 6f06 3c34 cbc5 7b5f E..([email protected].<4..{_ 0x0010 40ef 2615 04e1 0050 05af 8f79 bd96 b29a @.&....P...y.... 0x0020 5011 faec fc32 0000 0000 0000 0000 P....2........ 10:07:35.289168 64.239.38.21.http > 203.197.123.95.1249: . ack 577 win 6900 (DF) 0x0000 4500 0028 0000 4000 4006 8ca7 40ef 2615 E..(..@.@...@.&. 0x0010 cbc5 7b5f 0050 04e1 bd96 b29a 05af 8f7a ..{_.P.........z 0x0020 5010 1af4 dc2b 0000 P....+..
tcpdump2
(text/plain, 231.7 KB) - not displayed