Re: [squid-users] Yet another new cipher?
On Fri, 2016-07-01 at 01:04 +1200, Amos Jeffries wrote: > On 1/07/2016 12:43 a.m., James Lay wrote: > > > > On Wed, 2016-06-29 at 19:33 -0600, James Lay wrote: > > > > > > Yugh...starting around 10:00 facebook no longer works via > > > peek/splice. pcap contents show: > > > > > > 1QTV01...CHLOSNI.VERSscontent.xx.fbcdn.netQTV1 > > > > > > after the threeway handshake and an instant reset. Anyone know > > > what > > > this is? Cause I haven't a cluescreenshot of success after > > > bypassing included. Thank you. > > > > > I guess I should also say that this is from the official Facebook > > app > > on Android...just updated on Tuesday. > FWIW: I identified the last one from your posted wireshark details. > Looking at the "Unknown Ciphers:" list and looking up the hex codes > listed there in the IANA registry. > > The details posted so far about this issue tells me nothing except > that > FB suddenly stopped working. > > Amos > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users That's fair...I'm including a successful handshake...wireshark just sees this as data. Thanks Amos! James 192.168.1.101-stream5.pcapng Description: application/pcapng ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Yet another new cipher?
On 1/07/2016 12:43 a.m., James Lay wrote: > On Wed, 2016-06-29 at 19:33 -0600, James Lay wrote: >> Yugh...starting around 10:00 facebook no longer works via >> peek/splice. pcap contents show: >> >> 1QTV01...CHLOSNI.VERSscontent.xx.fbcdn.netQTV1 >> >> after the threeway handshake and an instant reset. Anyone know what >> this is? Cause I haven't a cluescreenshot of success after >> bypassing included. Thank you. >> > I guess I should also say that this is from the official Facebook app > on Android...just updated on Tuesday. FWIW: I identified the last one from your posted wireshark details. Looking at the "Unknown Ciphers:" list and looking up the hex codes listed there in the IANA registry. The details posted so far about this issue tells me nothing except that FB suddenly stopped working. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Yet another new cipher?
On Wed, 2016-06-29 at 19:33 -0600, James Lay wrote: > Yugh...starting around 10:00 facebook no longer works via > peek/splice. pcap contents show: > > 1QTV01...CHLOSNI.VERSscontent.xx.fbcdn.netQTV1 > > after the threeway handshake and an instant reset. Anyone know what > this is? Cause I haven't a cluescreenshot of success after > bypassing included. Thank you. > > James > > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users I guess I should also say that this is from the official Facebook app on Android...just updated on Tuesday. James___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
