Created
November 3, 2013 18:53
-
-
Save ismriv/7293501 to your computer and use it in GitHub Desktop.
TCP dump of an AJAX GET request.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 21:31:26.848910 IP (tos 0x0, ttl 64, id 60396, offset 0, flags [DF], proto TCP (6), length 442) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [P.], cksum 0x3202 (correct), seq 2476:2866, ack 2082, win 8192, options [nop,nop,TS val 1128842586 ecr 279780695], length 390 | |
| 0x0000: 4500 01ba ebec 4000 4006 5e87 c0a8 010b E.....@.@.^..... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da c987 5a85 9fe4 ...].O......Z... | |
| 0x0020: 8018 2000 3202 0000 0101 080a 4348 c55a ....2.......CH.Z | |
| 0x0030: 10ad 1d57 4745 5420 2f70 6f73 742e 6874 ...WGET./post.ht | |
| 0x0040: 6d6c 2048 5454 502f 312e 310d 0a48 6f73 ml.HTTP/1.1..Hos | |
| 0x0050: 743a 2069 736d 6169 6c61 6966 2e63 6f6d t:.somewhere.com | |
| 0x0060: 3a34 3030 300d 0a43 6f6e 6e65 6374 696f :4000..Connectio | |
| 0x0070: 6e3a 206b 6565 702d 616c 6976 650d 0a43 n:.keep-alive..C | |
| 0x0080: 6163 6865 2d43 6f6e 7472 6f6c 3a20 6d61 ache-Control:.ma | |
| 0x0090: 782d 6167 653d 300d 0a41 6363 6570 743a x-age=0..Accept: | |
| 0x00a0: 2074 6578 742f 6874 6d6c 2c61 7070 6c69 .text/html,appli | |
| 0x00b0: 6361 7469 6f6e 2f78 6874 6d6c 2b78 6d6c cation/xhtml+xml | |
| 0x00c0: 2c61 7070 6c69 6361 7469 6f6e 2f78 6d6c ,application/xml | |
| 0x00d0: 3b71 3d30 2e39 2c69 6d61 6765 2f77 6562 ;q=0.9,image/web | |
| 0x00e0: 702c 2a2f 2a3b 713d 302e 380d 0a55 7365 p,*/*;q=0.8..Use | |
| 0x00f0: 722d 4167 656e 743a 204d 6f7a 696c 6c61 r-Agent:.Mozilla | |
| 0x0100: 2f35 2e30 2028 4d61 6369 6e74 6f73 683b /5.0.(Macintosh; | |
| 0x0110: 2049 6e74 656c 204d 6163 204f 5320 5820 .Intel.Mac.OS.X. | |
| 0x0120: 3130 5f39 5f30 2920 4170 706c 6557 6562 10_9_0).AppleWeb | |
| 0x0130: 4b69 742f 3533 372e 3336 2028 4b48 544d Kit/537.36.(KHTM | |
| 0x0140: 4c2c 206c 696b 6520 4765 636b 6f29 2043 L,.like.Gecko).C | |
| 0x0150: 6872 6f6d 652f 3330 2e30 2e31 3539 392e hrome/30.0.1599. | |
| 0x0160: 3130 3120 5361 6661 7269 2f35 3337 2e33 101.Safari/537.3 | |
| 0x0170: 360d 0a41 6363 6570 742d 456e 636f 6469 6..Accept-Encodi | |
| 0x0180: 6e67 3a20 677a 6970 2c64 6566 6c61 7465 ng:.gzip,deflate | |
| 0x0190: 2c73 6463 680d 0a41 6363 6570 742d 4c61 ,sdch..Accept-La | |
| 0x01a0: 6e67 7561 6765 3a20 656e 2d55 532c 656e nguage:.en-US,en | |
| 0x01b0: 3b71 3d30 2e38 0d0a 0d0a ;q=0.8.... | |
| 21:31:26.886496 IP (tos 0x0, ttl 55, id 26342, offset 0, flags [DF], proto TCP (6), length 208) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [P.], cksum 0xb2f5 (correct), seq 2082:2238, ack 2866, win 86, options [nop,nop,TS val 279783201 ecr 1128842586], length 156 | |
| 0x0000: 4500 00d0 66e6 4000 3706 ed77 92b9 9a5d E...f.@.7..w...] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 9fe4 d7da cb0d .......OZ....... | |
| 0x0020: 8018 0056 b2f5 0000 0101 080a 10ad 2721 ...V..........'! | |
| 0x0030: 4348 c55a 4854 5450 2f31 2e31 2032 3030 CH.ZHTTP/1.1.200 | |
| 0x0040: 204f 4b0d 0a58 2d50 6f77 6572 6564 2d42 .OK..X-Powered-B | |
| 0x0050: 793a 2045 7870 7265 7373 0d0a 436f 6e74 y:.Express..Cont | |
| 0x0060: 656e 742d 5479 7065 3a20 7465 7874 2f68 ent-Type:.text/h | |
| 0x0070: 746d 6c0d 0a44 6174 653a 2053 6174 2c20 tml..Date:.Sat,. | |
| 0x0080: 3032 204e 6f76 2032 3031 3320 3231 3a33 02.Nov.2013.21:3 | |
| 0x0090: 313a 3235 2047 4d54 0d0a 436f 6e6e 6563 1:25.GMT..Connec | |
| 0x00a0: 7469 6f6e 3a20 6b65 6570 2d61 6c69 7665 tion:.keep-alive | |
| 0x00b0: 0d0a 5472 616e 7366 6572 2d45 6e63 6f64 ..Transfer-Encod | |
| 0x00c0: 696e 673a 2063 6875 6e6b 6564 0d0a 0d0a ing:.chunked.... | |
| 21:31:26.886582 IP (tos 0x0, ttl 64, id 61677, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [.], cksum 0x8589 (correct), seq 2866, ack 2238, win 8182, options [nop,nop,TS val 1128842622 ecr 279783201], length 0 | |
| 0x0000: 4500 0034 f0ed 4000 4006 5b0c c0a8 010b E..4..@.@.[..... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cb0d 5a85 a080 ...].O......Z... | |
| 0x0020: 8010 1ff6 8589 0000 0101 080a 4348 c57e ............CH.~ | |
| 0x0030: 10ad 2721 ..'! | |
| 21:31:26.920023 IP (tos 0x0, ttl 55, id 26343, offset 0, flags [DF], proto TCP (6), length 463) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [P.], cksum 0x9950 (correct), seq 2238:2649, ack 2866, win 86, options [nop,nop,TS val 279783209 ecr 1128842622], length 411 | |
| 0x0000: 4500 01cf 66e7 4000 3706 ec77 92b9 9a5d E...f.@.7..w...] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 a080 d7da cb0d .......OZ....... | |
| 0x0020: 8018 0056 9950 0000 0101 080a 10ad 2729 ...V.P........') | |
| 0x0030: 4348 c57e 3138 660d 0a3c 6874 6d6c 3e0a CH.~18f..<html>. | |
| 0x0040: 3c68 6561 643e 0a3c 2f68 6561 643e 0a3c <head>.</head>.< | |
| 0x0050: 626f 6479 3e0a 504f 5354 0a3c 7363 7269 body>.POST.<scri | |
| 0x0060: 7074 3e0a 2866 756e 6374 696f 6e28 2920 pt>.(function(). | |
| 0x0070: 7b0a 2020 666f 7220 2869 203d 2030 3b20 {...for.(i.=.0;. | |
| 0x0080: 6920 3c20 313b 2069 2b2b 2920 7b0a 2020 i.<.1;.i++).{... | |
| 0x0090: 2020 7661 7220 7572 6c20 3d20 2268 7474 ..var.url.=."htt | |
| 0x00a0: 703a 2f2f 6973 6d61 696c 6169 662e 636f p://somewhere.co | |
| 0x00b0: 6d3a 3430 3030 2f75 7365 7273 223b 0a20 m:4000/users";.. | |
| 0x00c0: 2020 2076 6172 2078 6d6c 4874 7470 203d ...var.xmlHttp.= | |
| 0x00d0: 206e 756c 6c3b 0a20 2020 2078 6d6c 4874 .null;.....xmlHt | |
| 0x00e0: 7470 203d 206e 6577 2058 4d4c 4874 7470 tp.=.new.XMLHttp | |
| 0x00f0: 5265 7175 6573 7428 293b 0a20 2020 2078 Request();.....x | |
| 0x0100: 6d6c 4874 7470 2e6f 7065 6e28 2250 4f53 mlHttp.open("POS | |
| 0x0110: 5422 2c20 7572 6c2c 2066 616c 7365 293b T",.url,.false); | |
| 0x0120: 0a20 2020 2078 6d6c 4874 7470 2e73 6574 .....xmlHttp.set | |
| 0x0130: 5265 7175 6573 7448 6561 6465 7228 2243 RequestHeader("C | |
| 0x0140: 6f6e 7465 6e74 2d74 7970 6522 2c22 6170 ontent-type","ap | |
| 0x0150: 706c 6963 6174 696f 6e2f 6a73 6f6e 2229 plication/json") | |
| 0x0160: 3b0a 2020 2020 786d 6c48 7474 702e 7365 ;.....xmlHttp.se | |
| 0x0170: 6e64 2827 7b22 7573 6572 6e61 6d65 223a nd('{"username": | |
| 0x0180: 2275 7365 726e 616d 6522 2c22 7061 7373 "username","pass | |
| 0x0190: 776f 7264 223a 2270 6173 7377 6f72 6422 word":"password" | |
| 0x01a0: 7d27 293b 0a20 207d 0a7d 2928 293b 0a3c }');...}.})();.< | |
| 0x01b0: 2f73 6372 6970 743e 0a3c 2f62 6f64 793e /script>.</body> | |
| 0x01c0: 0a3c 2f68 746d 6c3e 0d0a 300d 0a0d 0a .</html>..0.... | |
| 21:31:26.920113 IP (tos 0x0, ttl 64, id 18940, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [.], cksum 0x83d5 (correct), seq 2866, ack 2649, win 8166, options [nop,nop,TS val 1128842655 ecr 279783209], length 0 | |
| 0x0000: 4500 0034 49fc 4000 4006 01fe c0a8 010b E..4I.@.@....... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cb0d 5a85 a21b ...].O......Z... | |
| 0x0020: 8010 1fe6 83d5 0000 0101 080a 4348 c59f ............CH.. | |
| 0x0030: 10ad 2729 ..') | |
| 21:31:26.958764 IP (tos 0x0, ttl 64, id 47167, offset 0, flags [DF], proto TCP (6), length 520) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [P.], cksum 0x7c56 (correct), seq 2866:3334, ack 2649, win 8192, options [nop,nop,TS val 1128842692 ecr 279783209], length 468 | |
| 0x0000: 4500 0208 b83f 4000 4006 91e6 c0a8 010b E....?@.@....... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cb0d 5a85 a21b ...].O......Z... | |
| 0x0020: 8018 2000 7c56 0000 0101 080a 4348 c5c4 ....|V......CH.. | |
| 0x0030: 10ad 2729 504f 5354 202f 7573 6572 7320 ..')POST./users. | |
| 0x0040: 4854 5450 2f31 2e31 0d0a 486f 7374 3a20 HTTP/1.1..Host:. | |
| 0x0050: 6973 6d61 696c 6169 662e 636f 6d3a 3430 somewhere.com:40 | |
| 0x0060: 3030 0d0a 436f 6e6e 6563 7469 6f6e 3a20 00..Connection:. | |
| 0x0070: 6b65 6570 2d61 6c69 7665 0d0a 436f 6e74 keep-alive..Cont | |
| 0x0080: 656e 742d 4c65 6e67 7468 3a20 3435 0d0a ent-Length:.45.. | |
| 0x0090: 4f72 6967 696e 3a20 6874 7470 3a2f 2f69 Origin:.http://s | |
| 0x00a0: 736d 6169 6c61 6966 2e63 6f6d 3a34 3030 omewhere.com:400 | |
| 0x00b0: 300d 0a55 7365 722d 4167 656e 743a 204d 0..User-Agent:.M | |
| 0x00c0: 6f7a 696c 6c61 2f35 2e30 2028 4d61 6369 ozilla/5.0.(Maci | |
| 0x00d0: 6e74 6f73 683b 2049 6e74 656c 204d 6163 ntosh;.Intel.Mac | |
| 0x00e0: 204f 5320 5820 3130 5f39 5f30 2920 4170 .OS.X.10_9_0).Ap | |
| 0x00f0: 706c 6557 6562 4b69 742f 3533 372e 3336 pleWebKit/537.36 | |
| 0x0100: 2028 4b48 544d 4c2c 206c 696b 6520 4765 .(KHTML,.like.Ge | |
| 0x0110: 636b 6f29 2043 6872 6f6d 652f 3330 2e30 cko).Chrome/30.0 | |
| 0x0120: 2e31 3539 392e 3130 3120 5361 6661 7269 .1599.101.Safari | |
| 0x0130: 2f35 3337 2e33 360d 0a43 6f6e 7465 6e74 /537.36..Content | |
| 0x0140: 2d74 7970 653a 2061 7070 6c69 6361 7469 -type:.applicati | |
| 0x0150: 6f6e 2f6a 736f 6e0d 0a41 6363 6570 743a on/json..Accept: | |
| 0x0160: 202a 2f2a 0d0a 5265 6665 7265 723a 2068 .*/*..Referer:.h | |
| 0x0170: 7474 703a 2f2f 6973 6d61 696c 6169 662e ttp://somewhere. | |
| 0x0180: 636f 6d3a 3430 3030 2f70 6f73 742e 6874 com:4000/post.ht | |
| 0x0190: 6d6c 0d0a 4163 6365 7074 2d45 6e63 6f64 ml..Accept-Encod | |
| 0x01a0: 696e 673a 2067 7a69 702c 6465 666c 6174 ing:.gzip,deflat | |
| 0x01b0: 652c 7364 6368 0d0a 4163 6365 7074 2d4c e,sdch..Accept-L | |
| 0x01c0: 616e 6775 6167 653a 2065 6e2d 5553 2c65 anguage:.en-US,e | |
| 0x01d0: 6e3b 713d 302e 380d 0a0d 0a7b 2275 7365 n;q=0.8....{"use | |
| 0x01e0: 726e 616d 6522 3a22 7573 6572 6e61 6d65 rname":"username | |
| 0x01f0: 222c 2270 6173 7377 6f72 6422 3a22 7061 ","password":"pa | |
| 0x0200: 7373 776f 7264 227d ssword"} | |
| 21:31:26.995095 IP (tos 0x0, ttl 55, id 26344, offset 0, flags [DF], proto TCP (6), length 202) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [P.], cksum 0x09f3 (correct), seq 2649:2799, ack 3334, win 91, options [nop,nop,TS val 279783228 ecr 1128842692], length 150 | |
| 0x0000: 4500 00ca 66e8 4000 3706 ed7b 92b9 9a5d E...f.@.7..{...] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 a21b d7da cce1 .......OZ....... | |
| 0x0020: 8018 005b 09f3 0000 0101 080a 10ad 273c ...[..........'< | |
| 0x0030: 4348 c5c4 4854 5450 2f31 2e31 2032 3030 CH..HTTP/1.1.200 | |
| 0x0040: 204f 4b0d 0a58 2d50 6f77 6572 6564 2d42 .OK..X-Powered-B | |
| 0x0050: 793a 2045 7870 7265 7373 0d0a 436f 6e74 y:.Express..Cont | |
| 0x0060: 656e 742d 5479 7065 3a20 7465 7874 2f70 ent-Type:.text/p | |
| 0x0070: 6c61 696e 0d0a 436f 6e74 656e 742d 4c65 lain..Content-Le | |
| 0x0080: 6e67 7468 3a20 320d 0a44 6174 653a 2053 ngth:.2..Date:.S | |
| 0x0090: 6174 2c20 3032 204e 6f76 2032 3031 3320 at,.02.Nov.2013. | |
| 0x00a0: 3231 3a33 313a 3236 2047 4d54 0d0a 436f 21:31:26.GMT..Co | |
| 0x00b0: 6e6e 6563 7469 6f6e 3a20 6b65 6570 2d61 nnection:.keep-a | |
| 0x00c0: 6c69 7665 0d0a 0d0a 4f4b live....OK | |
| 21:31:26.995316 IP (tos 0x0, ttl 64, id 33397, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [.], cksum 0x80ff (correct), seq 3334, ack 2799, win 8182, options [nop,nop,TS val 1128842728 ecr 279783228], length 0 | |
| 0x0000: 4500 0034 8275 4000 4006 c984 c0a8 010b E..4.u@.@....... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cce1 5a85 a2b1 ...].O......Z... | |
| 0x0020: 8010 1ff6 80ff 0000 0101 080a 4348 c5e8 ............CH.. | |
| 0x0030: 10ad 273c ..'< |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment