Read Header packet

header

asked 2020-07-04 23:14:15 +0000

The Admiral
1 ●2

updated 2020-07-05 15:12:44 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●976 ●227 https://www.wireshark.org

Hi I very pleased join wireshark site I need to read this packet and what does mean

HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes HTTP/1.1\r\n
    [ [truncated]Expert Info (Chat/Sequence): HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shard]
        [HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes HTTP/1.1\r\n]
        [Severity level: Chat]
        [Group: Sequence]
    Request Method: HEAD
    Request URI: /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes
        Request URI Path: /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI
        Request URI Query: cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes
            Request URI Query Parameter: cms_redirect=yes
            Request URI Query Parameter: mh=1C
            Request URI Query Parameter: mip=37.8.11.217
            Request URI Query Parameter: mm=28
            Request URI Query Parameter: mn=sn-25auxa-b15l
            Request URI Query Parameter: ms=nvh
            Request URI Query Parameter: mt=1593896651
            Request URI Query Parameter: mv=m
            Request URI Query Parameter: mvi=1
            Request URI Query Parameter: pl=20
            Request URI Query Parameter: shardbypass=yes
    Request Version: HTTP/1.1

edit retag flag offensive close merge delete

add a comment

answered 2020-07-05 15:15:59 +0000

grahamb

23835 ●4 ●976 ●227 https://www.wireshark.org

That's an HTTP HEAD request with a bunch of additional query parameters. Here's a description of a HEAD request from MDN.

edit flag offensive delete link

Comments

Thanks . but what about _cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes

The Admiral ( 2020-07-06 20:29:43 +0000 )edit

Those are the query parameters as shown in the list of "Request URI Query Parameter" elements. Query parameters follow the URI after a ? and are separated by a & and Wireshark conveniently breaks them out for you.

Those parameters (name and value) only mean something in the context of the original application, nothing more can be said about them here.

grahamb ( 2020-07-06 20:46:29 +0000 )edit

add a comment

Read Header packet

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Read Header packet edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Read Header packet