Re: Is a HTTP header a clear text?
- From: "slebetman@xxxxxxxxx" <slebetman@xxxxxxxxx>
- Date: Thu, 18 Oct 2007 05:51:34 -0700
On Oct 18, 3:34 pm, Sonny <smani...@xxxxxxxxx> wrote:
Hi
I hope this is the right group or if not please suggest a more
suitable group =). Basically we are developing a packet sniffer to
check the http header. The problem is that in one box we can get some
clear text for the http header, but in another box, using the same
program, Linux version and page that is accessed, we only see encoded/
encrypted?? values. The security enhanced linux for both computers is
disabled, but still the same result (different values). We searched
for http header descriptions and found some of the keywords but
unfortunately that is not what we see when we capture the packets. We
see special characters. What is the best way using C in parsing/
retrieving the headers? We looked upon the wget and curl source code
but it is too complicated for us. We want to know the concept on how
to retrieve those header values. Hoping for a favorable response.
Thanks in advanced!
HTTP header is clear text regardless of OS.
HTTPS header is encrypted (nothing you can do about it, it's how it
was designed. Trying to intercept HTTPS communications will raise a
warning on either the client program or the server or both so the user
will know you're sniffing. Further, some client software will flat out
refuse intercepted data)
HTTP forwarded through a tunnel such as VPN or SSH is encrypted. In
this case you need to know where to capture packets. Capture them at
the tunnel interface instead of eth0.
.
- References:
- Is a HTTP header a clear text?
- From: Sonny
- Is a HTTP header a clear text?
- Prev by Date: Re: IP routing with remote DNS, but server & client on same subnet - how?
- Next by Date: Re: Iptables Forwarded traffic
- Previous by thread: Is a HTTP header a clear text?
- Next by thread: Re: Is a HTTP header a clear text?
- Index(es):
Relevant Pages
|
