Skip to content

Instantly share code, notes, and snippets.

@tdx

tdx/tcpflow-full.txt

Created March 10, 2022 13:31
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tdx/b5ee2f44592b72d60217214a10e64424 to your computer and use it in GitHub Desktop.
Save tdx/b5ee2f44592b72d60217214a10e64424 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tcpflow-full.txt
010.064.128.019.41750-217.069.142.100.00080: GET /build-imagemaker/?location= HTTP/1.1
Host: hb.bizmrg.com
User-Agent: MinIO (linux; amd64) minio-go/v7.0.24
Authorization: AWS4-HMAC-SHA256 Credential=eAnZoE9XLWrfUcMGjh5Db4/20220310/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date, Signature=894879dbca2644b02dcb4a8c6d6e3b08
483e67c845092163df1f09c6295311ff
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20220310T131847Z
217.069.142.100.00080-010.064.128.019.41750: HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 10 Mar 2022 13:18:48 GMT
Content-Type: application/xml
Content-Length: 61
Connection: keep-alive
X-Req-Id: 2WfN6gJE6
X-Host: hb-front29
<?xml version="1.0" encoding="utf-8"?>
<LocationConstraint/>
010.064.128.019.41750-217.069.142.100.00080: PUT /build-imagemaker/?notification= HTTP/1.1
Host: hb.bizmrg.com
User-Agent: MinIO (linux; amd64) minio-go/v7.0.24
Content-Length: 321
Authorization: AWS4-HMAC-SHA256 Credential=eAnZoE9XLWrfUcMGjh5Db4/20220310/us-east-1/s3/aws4_request, SignedHeaders=content-md5;host;x-amz-content-sha256;x-amz-date, Signature=5c4e0c47cf386486dcce
11aa1f0a0a33cf9d7450fdd961ed2261ab98d2b1575f
Content-Md5: A1wqXkGuu0fB2aEyNQ4X6g==
X-Amz-Content-Sha256: 38ef0d253258227f1ce8784f120d41f571c3e99dce1b59b559ea2c724f1be34f
X-Amz-Date: 20220310T131848Z
<NotificationConfiguration><SimpleTopicConfiguration><Event>s3:ObjectCreated:*</Event><Event>s3:ObjectRemoved:*</Event><Filter><S3Key><FilterRule><Name>Suffix</Name><Value>sqsh</Value></FilterRule
></S3Key></Filter><Url>http://tdx.dns-cloud.net/new_imagebuilder</Url></SimpleTopicConfiguration></NotificationConfiguration>
127.000.000.001.37270-127.000.000.001.05000: POST /new_imagebuilder HTTP/1.0
Host: tdx.dns-cloud.net
Connection: close
Content-Length: 375
User-Agent: Mozilla/5.0 (compatible; U; AnyEvent-HTTP/2.23; +http://software.schmorp.de/pkg/AnyEvent)
Referer: http://tdx.dns-cloud.net/new_imagebuilder
X-amz-sns-message-type: SubscriptionConfirmation
Via: 1.1 is-proxy01.i (squid/3.5.20)
X-Forwarded-For: 10.161.172.31
Cache-Control: max-age=259200
{"Timestamp":"2022-03-10T16:18:48+03:00","Type":"SubscriptionConfirmation","Message":"You have chosen to subscribe to the topic $topic\\nTo confirm the subscription you need to response with calcu
lated signature","TopicArn":"mcs2482053293|build-imagemaker|s3:ObjectCreated:*,s3:ObjectRemoved:*","SignatureVersion":1,"Token":"vGNSK6dVEaoKL3Kj6sL876TN22YNWuNXYBKxwvytYPKwSUcq"}
127.000.000.001.05000-127.000.000.001.37270: HTTP/1.0 200 OK
Content-Type: application/json
Date: Thu, 10 Mar 2022 13:18:48 GMT
Content-Length: 80
{"signature":"56333d8319fa924fd66d0d04377d7ca03b7b3c6aa324ec2d862181363d944eaf"}
217.069.142.100.00080-010.064.128.019.41750: HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 10 Mar 2022 13:18:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
X-Req-Id: QjMSXekQ
X-Host: hb-front29
---------------------------
010.064.128.019.41750-217.069.142.100.00080: GET /build-api/?location= HTTP/1.1
Host: hb.bizmrg.com
User-Agent: MinIO (linux; amd64) minio-go/v7.0.24
Authorization: AWS4-HMAC-SHA256 Credential=eAnZoE9XLWrfUcMGjh5Db4/20220310/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date, Signature=83c72d40563bf75f955ea697a9d23d6f
bec8934f8b2c7b4cb8481b25a335ce67
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20220310T131850Z
217.069.142.100.00080-010.064.128.019.41750: HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 10 Mar 2022 13:18:50 GMT
Content-Type: application/xml
Content-Length: 61
Connection: keep-alive
X-Req-Id: 2PeZkNncP
X-Host: hb-front29
<?xml version="1.0" encoding="utf-8"?>
<LocationConstraint/>
010.064.128.019.41750-217.069.142.100.00080: PUT /build-api/?notification= HTTP/1.1
Host: hb.bizmrg.com
User-Agent: MinIO (linux; amd64) minio-go/v7.0.24
Content-Length: 296
Authorization: AWS4-HMAC-SHA256 Credential=eAnZoE9XLWrfUcMGjh5Db4/20220310/us-east-1/s3/aws4_request, SignedHeaders=content-md5;host;x-amz-content-sha256;x-amz-date, Signature=f8dff543c3722cdf9787
6395548a079fac42c7c2797689643891398703d1e55c
Content-Md5: XtlrdHDtMRmypPSA8gq/cg==
X-Amz-Content-Sha256: 5d0f7474c5739467e1b2787ab4cce21fbd7dc657c2ef4a31b0bcccb3e5fea5d7
X-Amz-Date: 20220310T131850Z
<NotificationConfiguration><SimpleTopicConfiguration><Event>s3:ObjectCreated:*</Event><Filter><S3Key><FilterRule><Name>Prefix</Name><Value>clearSuspected</Value></FilterRule></S3Key></Filter><Url>
http://tdx.dns-cloud.net/clearSuspected</Url></SimpleTopicConfiguration></NotificationConfiguration>
127.000.000.001.37274-127.000.000.001.05000: POST /clearSuspected HTTP/1.0
Host: tdx.dns-cloud.net
Connection: close
Content-Length: 349
User-Agent: Mozilla/5.0 (compatible; U; AnyEvent-HTTP/2.23; +http://software.schmorp.de/pkg/AnyEvent)
Referer: http://tdx.dns-cloud.net/clearSuspected
X-amz-sns-message-type: SubscriptionConfirmation
Via: 1.1 is-proxy01.i (squid/3.5.20)
X-Forwarded-For: 10.161.172.31
Cache-Control: max-age=259200
{"Timestamp":"2022-03-10T16:18:50+03:00","Type":"SubscriptionConfirmation","Message":"You have chosen to subscribe to the topic $topic\\nTo confirm the subscription you need to response with calcu
lated signature","TopicArn":"mcs2482053293|build-api|s3:ObjectCreated:*","SignatureVersion":1,"Token":"spnLioSu8xhC1NfCEEX2tmotk8HXiiekTYg17GWUyy59UJoU"}
127.000.000.001.05000-127.000.000.001.37274: HTTP/1.0 200 OK
Content-Type: application/json
Date: Thu, 10 Mar 2022 13:18:50 GMT
Content-Length: 80
{"signature":"4f60eaf154792abde9ab0a058196744152998d6810ceee5f42f5205330967df9"}
217.069.142.100.00080-010.064.128.019.41750: HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 10 Mar 2022 13:18:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
X-Req-Id: 2r17kz9Cs
X-Host: hb-front29
--------------------------------
010.064.128.019.41750-217.069.142.100.00080: PUT /build-api/?notification= HTTP/1.1
Host: hb.bizmrg.com
User-Agent: MinIO (linux; amd64) minio-go/v7.0.24
Content-Length: 302
Authorization: AWS4-HMAC-SHA256 Credential=eAnZoE9XLWrfUcMGjh5Db4/20220310/us-east-1/s3/aws4_request, SignedHeaders=content-md5;host;x-amz-content-sha256;x-amz-date, Signature=5d3377c0c80a292dd4cf
feedd48e8c8b6ba79154f7593dedd32388e9994fcc70
Content-Md5: boP846yc3gYAk9N2wHU4bg==
X-Amz-Content-Sha256: 57c39c4ada8163c94e0310c3aef89bebee76eaa60dae8aaffaa5fb3b3f4d00b1
X-Amz-Date: 20220310T131853Z
<NotificationConfiguration><SimpleTopicConfiguration><Event>s3:ObjectCreated:*</Event><Filter><S3Key><FilterRule><Name>Prefix</Name><Value>clearImageBuilder</Value></FilterRule></S3Key></Filter><U
rl>http://tdx.dns-cloud.net/clearImageBuilder</Url></SimpleTopicConfiguration></NotificationConfiguration>
127.000.000.001.37276-127.000.000.001.05000: POST /clearImageBuilder HTTP/1.0
Host: tdx.dns-cloud.net
Connection: close
Content-Length: 349
User-Agent: Mozilla/5.0 (compatible; U; AnyEvent-HTTP/2.23; +http://software.schmorp.de/pkg/AnyEvent)
Referer: http://tdx.dns-cloud.net/clearImageBuilder
X-amz-sns-message-type: SubscriptionConfirmation
Via: 1.1 is-proxy01.i (squid/3.5.20)
X-Forwarded-For: 10.161.172.31
Cache-Control: max-age=259200
{"Timestamp":"2022-03-10T16:18:53+03:00","Type":"SubscriptionConfirmation","Message":"You have chosen to subscribe to the topic $topic\\nTo confirm the subscription you need to response with calcu
lated signature","TopicArn":"mcs2482053293|build-api|s3:ObjectCreated:*","SignatureVersion":1,"Token":"nzTJ7SWfdGPQbTJhTgCY8vgmGbcKokJrd78cVJ4ajyJ2xXtS"}
127.000.000.001.05000-127.000.000.001.37276: HTTP/1.0 200 OK
Content-Type: application/json
Date: Thu, 10 Mar 2022 13:18:53 GMT
Content-Length: 80
{"signature":"74856f882e2943ea5a518248653b822d2373c9f064702141c35be3ccc500cdd8"}
217.069.142.100.00080-010.064.128.019.41750: HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 10 Mar 2022 13:18:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
X-Req-Id: 2m62vdgKn
X-Host: hb-front29
-------------------------------
010.064.128.019.41750-217.069.142.100.00080: PUT /build-api/?notification= HTTP/1.1
Host: hb.bizmrg.com
User-Agent: MinIO (linux; amd64) minio-go/v7.0.24
Content-Length: 286
Authorization: AWS4-HMAC-SHA256 Credential=eAnZoE9XLWrfUcMGjh5Db4/20220310/us-east-1/s3/aws4_request, SignedHeaders=content-md5;host;x-amz-content-sha256;x-amz-date, Signature=140b41cc45dc2be59ae2
f8d844b9c8cf0459225f2378b5e2990e7719ae8bde5f
Content-Md5: KXQc5RXpe2LxmUp56b/0jg==
X-Amz-Content-Sha256: 9f2b53eea1f4a2f5f4a39481d0bbc7d6f29b4aaa3c0e1d911d4226edaa289a02
X-Amz-Date: 20220310T131855Z
<NotificationConfiguration><SimpleTopicConfiguration><Event>s3:ObjectCreated:*</Event><Filter><S3Key><FilterRule><Name>Prefix</Name><Value>clearList</Value></FilterRule></S3Key></Filter><Url>http:
//tdx.dns-cloud.net/clearList</Url></SimpleTopicConfiguration></NotificationConfiguration>
127.000.000.001.37278-127.000.000.001.05000: POST /clearList HTTP/1.0
Host: tdx.dns-cloud.net
Connection: close
Content-Length: 349
User-Agent: Mozilla/5.0 (compatible; U; AnyEvent-HTTP/2.23; +http://software.schmorp.de/pkg/AnyEvent)
Referer: http://tdx.dns-cloud.net/clearList
X-amz-sns-message-type: SubscriptionConfirmation
Via: 1.1 is-proxy01.i (squid/3.5.20)
X-Forwarded-For: 10.161.172.31
Cache-Control: max-age=259200
{"Timestamp":"2022-03-10T16:18:55+03:00","Type":"SubscriptionConfirmation","Message":"You have chosen to subscribe to the topic $topic\\nTo confirm the subscription you need to response with calcu
lated signature","TopicArn":"mcs2482053293|build-api|s3:ObjectCreated:*","SignatureVersion":1,"Token":"Sn2jVA6nKyJZErf5y1jn9ScyaiXmBJzjAKHgCgUQcMe4m7LQ"}
127.000.000.001.05000-127.000.000.001.37278: HTTP/1.0 200 OK
Content-Type: application/json
Date: Thu, 10 Mar 2022 13:18:55 GMT
Content-Length: 80
{"signature":"2472e1da1fb17c2d721ed0b53d6b75dd889f4eb60bf817d11d35867d0e95a32e"}
217.069.142.100.00080-010.064.128.019.41750: HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 10 Mar 2022 13:18:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
X-Req-Id: 2c5HS3FWG
X-Host: hb-front29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment