Created
November 3, 2013 18:59
-
-
Save ismriv/7293584 to your computer and use it in GitHub Desktop.
TCP dump of an AJAX POST request
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 21:32:21.281738 IP (tos 0x0, ttl 64, id 38969, offset 0, flags [DF], proto TCP (6), length 441) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [P.], cksum 0xc625 (correct), seq 3334:3723, ack 2799, win 8192, options [nop,nop,TS val 1128896825 ecr 279783228], length 389 | |
| 0x0000: 4500 01b9 9839 4000 4006 b23b c0a8 010b E....9@.@..;.... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cce1 5a85 a2b1 ...].O......Z... | |
| 0x0020: 8018 2000 c625 0000 0101 080a 4349 9939 .....%......CI.9 | |
| 0x0030: 10ad 273c 4745 5420 2f67 6574 2e68 746d ..'<GET./get.htm | |
| 0x0040: 6c20 4854 5450 2f31 2e31 0d0a 486f 7374 l.HTTP/1.1..Host | |
| 0x0050: 3a20 6973 6d61 696c 6169 662e 636f 6d3a :.somewhere.com: | |
| 0x0060: 3430 3030 0d0a 436f 6e6e 6563 7469 6f6e 4000..Connection | |
| 0x0070: 3a20 6b65 6570 2d61 6c69 7665 0d0a 4361 :.keep-alive..Ca | |
| 0x0080: 6368 652d 436f 6e74 726f 6c3a 206d 6178 che-Control:.max | |
| 0x0090: 2d61 6765 3d30 0d0a 4163 6365 7074 3a20 -age=0..Accept:. | |
| 0x00a0: 7465 7874 2f68 746d 6c2c 6170 706c 6963 text/html,applic | |
| 0x00b0: 6174 696f 6e2f 7868 746d 6c2b 786d 6c2c ation/xhtml+xml, | |
| 0x00c0: 6170 706c 6963 6174 696f 6e2f 786d 6c3b application/xml; | |
| 0x00d0: 713d 302e 392c 696d 6167 652f 7765 6270 q=0.9,image/webp | |
| 0x00e0: 2c2a 2f2a 3b71 3d30 2e38 0d0a 5573 6572 ,*/*;q=0.8..User | |
| 0x00f0: 2d41 6765 6e74 3a20 4d6f 7a69 6c6c 612f -Agent:.Mozilla/ | |
| 0x0100: 352e 3020 284d 6163 696e 746f 7368 3b20 5.0.(Macintosh;. | |
| 0x0110: 496e 7465 6c20 4d61 6320 4f53 2058 2031 Intel.Mac.OS.X.1 | |
| 0x0120: 305f 395f 3029 2041 7070 6c65 5765 624b 0_9_0).AppleWebK | |
| 0x0130: 6974 2f35 3337 2e33 3620 284b 4854 4d4c it/537.36.(KHTML | |
| 0x0140: 2c20 6c69 6b65 2047 6563 6b6f 2920 4368 ,.like.Gecko).Ch | |
| 0x0150: 726f 6d65 2f33 302e 302e 3135 3939 2e31 rome/30.0.1599.1 | |
| 0x0160: 3031 2053 6166 6172 692f 3533 372e 3336 01.Safari/537.36 | |
| 0x0170: 0d0a 4163 6365 7074 2d45 6e63 6f64 696e ..Accept-Encodin | |
| 0x0180: 673a 2067 7a69 702c 6465 666c 6174 652c g:.gzip,deflate, | |
| 0x0190: 7364 6368 0d0a 4163 6365 7074 2d4c 616e sdch..Accept-Lan | |
| 0x01a0: 6775 6167 653a 2065 6e2d 5553 2c65 6e3b guage:.en-US,en; | |
| 0x01b0: 713d 302e 380d 0a0d 0a q=0.8.... | |
| 21:32:21.326635 IP (tos 0x0, ttl 55, id 26345, offset 0, flags [DF], proto TCP (6), length 208) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [P.], cksum 0xa2c1 (correct), seq 2799:2955, ack 3723, win 95, options [nop,nop,TS val 279796811 ecr 1128896825], length 156 | |
| 0x0000: 4500 00d0 66e9 4000 3706 ed74 92b9 9a5d E...f.@.7..t...] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 a2b1 d7da ce66 .......OZ......f | |
| 0x0020: 8018 005f a2c1 0000 0101 080a 10ad 5c4b ..._..........\K | |
| 0x0030: 4349 9939 4854 5450 2f31 2e31 2032 3030 CI.9HTTP/1.1.200 | |
| 0x0040: 204f 4b0d 0a58 2d50 6f77 6572 6564 2d42 .OK..X-Powered-B | |
| 0x0050: 793a 2045 7870 7265 7373 0d0a 436f 6e74 y:.Express..Cont | |
| 0x0060: 656e 742d 5479 7065 3a20 7465 7874 2f68 ent-Type:.text/h | |
| 0x0070: 746d 6c0d 0a44 6174 653a 2053 6174 2c20 tml..Date:.Sat,. | |
| 0x0080: 3032 204e 6f76 2032 3031 3320 3231 3a33 02.Nov.2013.21:3 | |
| 0x0090: 323a 3230 2047 4d54 0d0a 436f 6e6e 6563 2:20.GMT..Connec | |
| 0x00a0: 7469 6f6e 3a20 6b65 6570 2d61 6c69 7665 tion:.keep-alive | |
| 0x00b0: 0d0a 5472 616e 7366 6572 2d45 6e63 6f64 ..Transfer-Encod | |
| 0x00c0: 696e 673a 2063 6875 6e6b 6564 0d0a 0d0a ing:.chunked.... | |
| 21:32:21.326736 IP (tos 0x0, ttl 64, id 42887, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [.], cksum 0x7651 (correct), seq 3723, ack 2955, win 8182, options [nop,nop,TS val 1128896869 ecr 279796811], length 0 | |
| 0x0000: 4500 0034 a787 4000 4006 a472 c0a8 010b E..4..@.@..r.... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da ce66 5a85 a34d ...].O.....fZ..M | |
| 0x0020: 8010 1ff6 7651 0000 0101 080a 4349 9965 ....vQ......CI.e | |
| 0x0030: 10ad 5c4b ..\K | |
| 21:32:21.359196 IP (tos 0x0, ttl 55, id 26346, offset 0, flags [DF], proto TCP (6), length 393) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [P.], cksum 0xabd2 (correct), seq 2955:3296, ack 3723, win 95, options [nop,nop,TS val 279796819 ecr 1128896869], length 341 | |
| 0x0000: 4500 0189 66ea 4000 3706 ecba 92b9 9a5d E...f.@.7......] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 a34d d7da ce66 .......OZ..M...f | |
| 0x0020: 8018 005f abd2 0000 0101 080a 10ad 5c53 ..._..........\S | |
| 0x0030: 4349 9965 3134 390d 0a3c 6874 6d6c 3e0a CI.e149..<html>. | |
| 0x0040: 3c68 6561 643e 0a3c 2f68 6561 643e 0a3c <head>.</head>.< | |
| 0x0050: 626f 6479 3e0a 4745 540a 3c73 6372 6970 body>.GET.<scrip | |
| 0x0060: 743e 0a28 6675 6e63 7469 6f6e 2829 207b t>.(function().{ | |
| 0x0070: 0a20 2066 6f72 2028 6920 3d20 303b 2069 ...for.(i.=.0;.i | |
| 0x0080: 203c 2031 3b20 692b 2b29 207b 0a20 2020 .<.1;.i++).{.... | |
| 0x0090: 2076 6172 2075 726c 203d 2022 6874 7470 .var.url.=."http | |
| 0x00a0: 3a2f 2f69 736d 6169 6c61 6966 2e63 6f6d ://somewhere.com | |
| 0x00b0: 3a34 3030 302f 7573 6572 733f 7573 6572 :4000/users?user | |
| 0x00c0: 6e61 6d65 3d75 7365 726e 616d 6526 7061 name=username&pa | |
| 0x00d0: 7373 776f 7264 3d70 6173 7377 6f72 6422 ssword=password" | |
| 0x00e0: 3b0a 2020 2020 7661 7220 786d 6c48 7474 ;.....var.xmlHtt | |
| 0x00f0: 7020 3d20 6e75 6c6c 3b0a 2020 2020 786d p.=.null;.....xm | |
| 0x0100: 6c48 7474 7020 3d20 6e65 7720 584d 4c48 lHttp.=.new.XMLH | |
| 0x0110: 7474 7052 6571 7565 7374 2829 3b0a 2020 ttpRequest();... | |
| 0x0120: 2020 786d 6c48 7474 702e 6f70 656e 2822 ..xmlHttp.open(" | |
| 0x0130: 4745 5422 2c20 7572 6c2c 2066 616c 7365 GET",.url,.false | |
| 0x0140: 293b 0a20 2020 2078 6d6c 4874 7470 2e73 );.....xmlHttp.s | |
| 0x0150: 656e 6428 6e75 6c6c 293b 2020 2020 0a20 end(null);...... | |
| 0x0160: 207d 0a7d 2928 293b 0a3c 2f73 6372 6970 .}.})();.</scrip | |
| 0x0170: 743e 0a3c 2f62 6f64 793e 0a3c 2f68 746d t>.</body>.</htm | |
| 0x0180: 6c3e 0d0a 300d 0a0d 0a l>..0.... | |
| 21:32:21.359274 IP (tos 0x0, ttl 64, id 49924, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [.], cksum 0x74e0 (correct), seq 3723, ack 3296, win 8170, options [nop,nop,TS val 1128896901 ecr 279796819], length 0 | |
| 0x0000: 4500 0034 c304 4000 4006 88f5 c0a8 010b E..4..@.@....... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da ce66 5a85 a4a2 ...].O.....fZ... | |
| 0x0020: 8010 1fea 74e0 0000 0101 080a 4349 9985 ....t.......CI.. | |
| 0x0030: 10ad 5c53 ..\S | |
| 21:32:21.413567 IP (tos 0x0, ttl 64, id 23081, offset 0, flags [DF], proto TCP (6), length 422) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [P.], cksum 0x8cb3 (correct), seq 3723:4093, ack 3296, win 8192, options [nop,nop,TS val 1128896955 ecr 279796819], length 370 | |
| 0x0000: 4500 01a6 5a29 4000 4006 f05e c0a8 010b E...Z)@.@..^.... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da ce66 5a85 a4a2 ...].O.....fZ... | |
| 0x0020: 8018 2000 8cb3 0000 0101 080a 4349 99bb ............CI.. | |
| 0x0030: 10ad 5c53 4745 5420 2f75 7365 7273 3f75 ..\SGET./users?u | |
| 0x0040: 7365 726e 616d 653d 7573 6572 6e61 6d65 sername=username | |
| 0x0050: 2670 6173 7377 6f72 643d 7061 7373 776f &password=passwo | |
| 0x0060: 7264 2048 5454 502f 312e 310d 0a48 6f73 rd.HTTP/1.1..Hos | |
| 0x0070: 743a 2069 736d 6169 6c61 6966 2e63 6f6d t:.somewhere.com | |
| 0x0080: 3a34 3030 300d 0a43 6f6e 6e65 6374 696f :4000..Connectio | |
| 0x0090: 6e3a 206b 6565 702d 616c 6976 650d 0a55 n:.keep-alive..U | |
| 0x00a0: 7365 722d 4167 656e 743a 204d 6f7a 696c ser-Agent:.Mozil | |
| 0x00b0: 6c61 2f35 2e30 2028 4d61 6369 6e74 6f73 la/5.0.(Macintos | |
| 0x00c0: 683b 2049 6e74 656c 204d 6163 204f 5320 h;.Intel.Mac.OS. | |
| 0x00d0: 5820 3130 5f39 5f30 2920 4170 706c 6557 X.10_9_0).AppleW | |
| 0x00e0: 6562 4b69 742f 3533 372e 3336 2028 4b48 ebKit/537.36.(KH | |
| 0x00f0: 544d 4c2c 206c 696b 6520 4765 636b 6f29 TML,.like.Gecko) | |
| 0x0100: 2043 6872 6f6d 652f 3330 2e30 2e31 3539 .Chrome/30.0.159 | |
| 0x0110: 392e 3130 3120 5361 6661 7269 2f35 3337 9.101.Safari/537 | |
| 0x0120: 2e33 360d 0a41 6363 6570 743a 202a 2f2a .36..Accept:.*/* | |
| 0x0130: 0d0a 5265 6665 7265 723a 2068 7474 703a ..Referer:.http: | |
| 0x0140: 2f2f 6973 6d61 696c 6169 662e 636f 6d3a //somewhere.com: | |
| 0x0150: 3430 3030 2f67 6574 2e68 746d 6c0d 0a41 4000/get.html..A | |
| 0x0160: 6363 6570 742d 456e 636f 6469 6e67 3a20 ccept-Encoding:. | |
| 0x0170: 677a 6970 2c64 6566 6c61 7465 2c73 6463 gzip,deflate,sdc | |
| 0x0180: 680d 0a41 6363 6570 742d 4c61 6e67 7561 h..Accept-Langua | |
| 0x0190: 6765 3a20 656e 2d55 532c 656e 3b71 3d30 ge:.en-US,en;q=0 | |
| 0x01a0: 2e38 0d0a 0d0a .8.... | |
| 21:32:21.449476 IP (tos 0x0, ttl 55, id 26347, offset 0, flags [DF], proto TCP (6), length 202) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [P.], cksum 0xfa4c (correct), seq 3296:3446, ack 4093, win 99, options [nop,nop,TS val 279796842 ecr 1128896955], length 150 | |
| 0x0000: 4500 00ca 66eb 4000 3706 ed78 92b9 9a5d E...f.@.7..x...] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 a4a2 d7da cfd8 .......OZ....... | |
| 0x0020: 8018 0063 fa4c 0000 0101 080a 10ad 5c6a ...c.L........\j | |
| 0x0030: 4349 99bb 4854 5450 2f31 2e31 2032 3030 CI..HTTP/1.1.200 | |
| 0x0040: 204f 4b0d 0a58 2d50 6f77 6572 6564 2d42 .OK..X-Powered-B | |
| 0x0050: 793a 2045 7870 7265 7373 0d0a 436f 6e74 y:.Express..Cont | |
| 0x0060: 656e 742d 5479 7065 3a20 7465 7874 2f70 ent-Type:.text/p | |
| 0x0070: 6c61 696e 0d0a 436f 6e74 656e 742d 4c65 lain..Content-Le | |
| 0x0080: 6e67 7468 3a20 320d 0a44 6174 653a 2053 ngth:.2..Date:.S | |
| 0x0090: 6174 2c20 3032 204e 6f76 2032 3031 3320 at,.02.Nov.2013. | |
| 0x00a0: 3231 3a33 323a 3230 2047 4d54 0d0a 436f 21:32:20.GMT..Co | |
| 0x00b0: 6e6e 6563 7469 6f6e 3a20 6b65 6570 2d61 nnection:.keep-a | |
| 0x00c0: 6c69 7665 0d0a 0d0a 4f4b live....OK | |
| 21:32:21.449634 IP (tos 0x0, ttl 64, id 10414, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [.], cksum 0x725b (correct), seq 4093, ack 3446, win 8182, options [nop,nop,TS val 1128896991 ecr 279796842], length 0 | |
| 0x0000: 4500 0034 28ae 4000 4006 234c c0a8 010b E..4(.@.@.#L.... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cfd8 5a85 a538 ...].O......Z..8 | |
| 0x0020: 8010 1ff6 725b 0000 0101 080a 4349 99df ....r[......CI.. | |
| 0x0030: 10ad 5c6a ..\j | |
| 21:34:21.557230 IP (tos 0x0, ttl 55, id 26348, offset 0, flags [DF], proto TCP (6), length 52) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [F.], cksum 0x1cbc (correct), seq 3446, ack 4093, win 99, options [nop,nop,TS val 279826843 ecr 1128896991], length 0 | |
| 0x0000: 4500 0034 66ec 4000 3706 ee0d 92b9 9a5d E..4f.@.7......] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 a538 d7da cfd8 .......OZ..8.... | |
| 0x0020: 8011 0063 1cbc 0000 0101 080a 10ad d19b ...c............ | |
| 0x0030: 4349 99df CI.. | |
| 21:34:21.557328 IP (tos 0x0, ttl 64, id 40648, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [.], cksum 0x293f (correct), seq 4093, ack 3447, win 8192, options [nop,nop,TS val 1129016765 ecr 279826843], length 0 | |
| 0x0000: 4500 0034 9ec8 4000 4006 ad31 c0a8 010b E..4..@.@..1.... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cfd8 5a85 a539 ...].O......Z..9 | |
| 0x0020: 8010 2000 293f 0000 0101 080a 434b 6dbd ....)?......CKm. | |
| 0x0030: 10ad d19b .... | |
| 21:34:31.458388 IP (tos 0x0, ttl 64, id 51211, offset 0, flags [DF], proto TCP (6), length 52) | |
| 192.168.1.11.62543 > somewhere.com.terabase: Flags [F.], cksum 0x02a8 (correct), seq 4093, ack 3447, win 8192, options [nop,nop,TS val 1129026643 ecr 279826843], length 0 | |
| 0x0000: 4500 0034 c80b 4000 4006 83ee c0a8 010b E..4..@.@....... | |
| 0x0010: 92b9 9a5d f44f 0fa0 d7da cfd8 5a85 a539 ...].O......Z..9 | |
| 0x0020: 8011 2000 02a8 0000 0101 080a 434b 9453 ............CK.S | |
| 0x0030: 10ad d19b .... | |
| 21:34:31.490978 IP (tos 0x0, ttl 55, id 0, offset 0, flags [DF], proto TCP (6), length 52) | |
| somewhere.com.terabase > 192.168.1.11.62543: Flags [.], cksum 0x1878 (correct), seq 3447, ack 4094, win 99, options [nop,nop,TS val 279829352 ecr 1129026643], length 0 | |
| 0x0000: 4500 0034 0000 4000 3706 54fa 92b9 9a5d E..4..@.7.T....] | |
| 0x0010: c0a8 010b 0fa0 f44f 5a85 a539 d7da cfd9 .......OZ..9.... | |
| 0x0020: 8010 0063 1878 0000 0101 080a 10ad db68 ...c.x.........h | |
| 0x0030: 434b 9453 CK.S |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment