Ask Your Question
0

Read Header packet

asked 2020-07-04 23:14:15 +0000

The Admiral gravatar image

updated 2020-07-05 15:12:44 +0000

grahamb gravatar image

Hi I very pleased join wireshark site I need to read this packet and what does mean

HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes HTTP/1.1\r\n
    [ [truncated]Expert Info (Chat/Sequence): HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shard]
        [HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes HTTP/1.1\r\n]
        [Severity level: Chat]
        [Group: Sequence]
    Request Method: HEAD
    Request URI: /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes
        Request URI Path: /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI
        Request URI Query: cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes
            Request URI Query Parameter: cms_redirect=yes
            Request URI Query Parameter: mh=1C
            Request URI Query Parameter: mip=37.8.11.217
            Request URI Query Parameter: mm=28
            Request URI Query Parameter: mn=sn-25auxa-b15l
            Request URI Query Parameter: ms=nvh
            Request URI Query Parameter: mt=1593896651
            Request URI Query Parameter: mv=m
            Request URI Query Parameter: mvi=1
            Request URI Query Parameter: pl=20
            Request URI Query Parameter: shardbypass=yes
    Request Version: HTTP/1.1
edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-07-05 15:15:59 +0000

grahamb gravatar image

That's an HTTP HEAD request with a bunch of additional query parameters. Here's a description of a HEAD request from MDN.

edit flag offensive delete link more

Comments

Thanks . but what about _cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes

The Admiral gravatar imageThe Admiral ( 2020-07-06 20:29:43 +0000 )edit

Those are the query parameters as shown in the list of "Request URI Query Parameter" elements. Query parameters follow the URI after a ? and are separated by a & and Wireshark conveniently breaks them out for you.

Those parameters (name and value) only mean something in the context of the original application, nothing more can be said about them here.

grahamb gravatar imagegrahamb ( 2020-07-06 20:46:29 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-07-04 23:14:15 +0000

Seen: 91 times

Last updated: Jul 05