On Thu, 26 Feb 2004, Adrian Chadd wrote: > On Thu, Feb 26, 2004, Adrian Chadd wrote: > > > > > .. and thats it until the socket times out. > > > > Now, here's a tcpdump of my local conversation: > > Spammier, Henrik, can you show me what your request looks like > via nc by using tcpdump -x -X -s 1518 ?
Request: #!/bin/sh cat <<EOF | nc proxy 3128 GET http://devserv.marasystems.com/~henrik/hello.cgi HTTP/1.0 GET http://devserv.marasystems.com/~henrik/hello.cgi?test HTTP/1.0 EOF hello.cgi: #!/bin/sh sleep 2 echo "Content-Type: text/plain" echo echo hello tcpdump result: 17:09:06.448763 localhost.localdomain.51165 > localhost.localdomain.squid: S 2473937629:2473937629(0) win 32767 <mss 16396,sackOK,timestamp 351354740 0,nop,wscale 0> (DF) 0x0000 4500 003c 75a9 4000 4006 c710 7f00 0001 E..<[EMAIL PROTECTED]@....... 0x0010 7f00 0001 c7dd 0c38 9375 4add 0000 0000 .......8.uJ..... 0x0020 a002 7fff 88df 0000 0204 400c 0402 080a [EMAIL PROTECTED] 0x0030 14f1 3f74 0000 0000 0103 0300 ..?t........ 17:09:06.448833 localhost.localdomain.squid > localhost.localdomain.51165: S 2487177309:2487177309(0) ack 2473937630 win 32767 <mss 16396,sackOK,timestamp 351354740 351354740,nop,wscale 0> (DF) 0x0000 4500 003c 0000 4000 4006 3cba 7f00 0001 E..<[EMAIL PROTECTED]@.<..... 0x0010 7f00 0001 0c38 c7dd 943f 505d 9375 4ade .....8...?P].uJ. 0x0020 a012 7fff 4fcc 0000 0204 400c 0402 080a [EMAIL PROTECTED] 0x0030 14f1 3f74 14f1 3f74 0103 0300 ..?t..?t.... 17:09:06.448872 localhost.localdomain.51165 > localhost.localdomain.squid: . ack 1 win 32767 <nop,nop,timestamp 351354740 351354740> (DF) 0x0000 4500 0034 75aa 4000 4006 c717 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 c7dd 0c38 9375 4ade 943f 505e .......8.uJ..?P^ 0x0020 8010 7fff b8e9 0000 0101 080a 14f1 3f74 ..............?t 0x0030 14f1 3f74 ..?t 17:09:06.457845 localhost.localdomain.51165 > localhost.localdomain.squid: P 1:132(131) ack 1 win 32767 <nop,nop,timestamp 351354741 351354740> (DF) 0x0000 4500 00b7 75ab 4000 4006 c693 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 c7dd 0c38 9375 4ade 943f 505e .......8.uJ..?P^ 0x0020 8018 7fff dfab 0000 0101 080a 14f1 3f75 ..............?u 0x0030 14f1 3f74 4745 5420 6874 7470 3a2f 2f64 ..?tGET.http://d 0x0040 6576 7365 7276 2e6d 6172 6173 7973 7465 evserv.marasyste 0x0050 6d73 ms 17:09:06.457908 localhost.localdomain.squid > localhost.localdomain.51165: . ack 132 win 32767 <nop,nop,timestamp 351354741 351354741> (DF) 0x0000 4500 0034 6f2a 4000 4006 cd97 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 0c38 c7dd 943f 505e 9375 4b61 .....8...?P^.uKa 0x0020 8010 7fff b864 0000 0101 080a 14f1 3f75 .....d........?u 0x0030 14f1 3f75 ..?u 17:09:06.466580 localhost.localdomain.51165 > localhost.localdomain.squid: F 132:132(0) ack 1 win 32767 <nop,nop,timestamp 351354742 351354741> (DF) 0x0000 4500 0034 75ac 4000 4006 c715 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 c7dd 0c38 9375 4b61 943f 505e .......8.uKa.?P^ 0x0020 8011 7fff b862 0000 0101 080a 14f1 3f76 .....b........?v 0x0030 14f1 3f75 ..?u 17:09:06.499453 localhost.localdomain.squid > localhost.localdomain.51165: . ack 133 win 32767 <nop,nop,timestamp 351354746 351354742> (DF) 0x0000 4500 0034 6f2b 4000 4006 cd96 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 0c38 c7dd 943f 505e 9375 4b62 .....8...?P^.uKb 0x0020 8010 7fff b85d 0000 0101 080a 14f1 3f7a .....]........?z 0x0030 14f1 3f76 ..?v 17:09:08.478148 localhost.localdomain.squid > localhost.localdomain.51165: P 1:344(343) ack 133 win 32767 <nop,nop,timestamp 351354943 351354742> (DF) 0x0000 4500 018b 6f2c 4000 4006 cc3e 7f00 0001 E...o,@[EMAIL PROTECTED]>.... 0x0010 7f00 0001 0c38 c7dd 943f 505e 9375 4b62 .....8...?P^.uKb 0x0020 8018 7fff 08f8 0000 0101 080a 14f1 403f [EMAIL PROTECTED] 0x0030 14f1 3f76 4854 5450 2f31 2e30 2032 3030 ..?vHTTP/1.0.200 0x0040 204f 4b0d 0a44 6174 653a 2054 6875 2c20 .OK..Date:.Thu,. 0x0050 3236 26 17:09:08.478190 localhost.localdomain.51165 > localhost.localdomain.squid: . ack 344 win 32767 <nop,nop,timestamp 351354943 351354943> (DF) 0x0000 4500 0034 75ad 4000 4006 c714 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 c7dd 0c38 9375 4b62 943f 51b5 .......8.uKb.?Q. 0x0020 8010 7fff b578 0000 0101 080a 14f1 403f [EMAIL PROTECTED] 0x0030 14f1 403f [EMAIL PROTECTED] 17:09:08.478403 localhost.localdomain.squid > localhost.localdomain.51165: F 344:344(0) ack 133 win 32767 <nop,nop,timestamp 351354943 351354943> (DF) 0x0000 4500 0034 6f2d 4000 4006 cd94 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 0c38 c7dd 943f 51b5 9375 4b62 .....8...?Q..uKb 0x0020 8011 7fff b577 0000 0101 080a 14f1 403f [EMAIL PROTECTED] 0x0030 14f1 403f [EMAIL PROTECTED] 17:09:08.478419 localhost.localdomain.51165 > localhost.localdomain.squid: . ack 345 win 32767 <nop,nop,timestamp 351354943 351354943> (DF) 0x0000 4500 0034 75ae 4000 4006 c713 7f00 0001 [EMAIL PROTECTED]@....... 0x0010 7f00 0001 c7dd 0c38 9375 4b62 943f 51b6 .......8.uKb.?Q. 0x0020 8010 7fff b577 0000 0101 080a 14f1 403f [EMAIL PROTECTED] 0x0030 14f1 403f [EMAIL PROTECTED] Regards Henrik
