I am doing a HTTPS request wit curl .
curl --negotiate -u: https://svchost
When I do a reverse IP lookup on svchost, I get 3 entries
reverse-ip domain name pointer svchostA
reverse-ip domain name pointer svchost
reverse-ip domain name pointer svchostB
Is there a way to see what host I connected to when doing my curl? I would like to figure out if its svchost, svchostA, svchostB?
I assume that your string "reverse-ip" matches the IP address observed in the trace file.
It looks like the server "svchost" is available through three different host names. The web servers configuration links the available content to a certain directory on the server.
From the client perspective it is hard to tell if a load balancer or similar device redirects traffic to multiple servers (and if the session is really as sticky as it should be)
Asked: 2020-06-28 16:24:32 +0000
Seen: 521 times
Last updated: Jun 30 '20
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
