I got a basic doubt regarding opening TCP connections to fetch multiple HTTP objects pertaining to a website.
Here is an example:
I clicked www.disney.com and captured port 53(DNS) packets associated to that site
Sample queries included
Here, on my browser i typed only www.disney.com but my doubt is who will inform to client that in order to get full page it needs to open connections to a.dilcdn.com ,ajax.............
However, there can also be objects linked from other sites like the ones that you have found. Think of ad-banners, statistics (like google-analytics), or social media links (like facebook).
answered 22 May, 15:24
While Wireshark is pretty good at helping you work out how a browser works, you are probably better off using the debugging tools available for browsers. These probably allow better context for the various HTTP calls that are triggered.
Chrome has debugging tools under the Tools > Developer Tools and then click the Network tab Firefox has the Firebug add on Internet Explorer has Tools > Developer Tools (or press F12)
answered 22 May, 16:12