Source Destination Protocol Info No. 192.168.1.1 192.168.1.153 TCP 32780 > www [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=5399931 TSER=0 WS=0 1 Frame 1 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: 00:a0:cc:c2:3b:7b, Dst: 00:0c:29:2d:46:3d Internet Protocol, Src Addr: 192.168.1.1 (192.168.1.1), Dst Addr: 192.168.1.153 (192.168.1.153) Transmission Control Protocol, Src Port: 32780 (32780), Dst Port: www (80), Seq: 0, Ack: 0, Len: 0 0000 00 0c 29 2d 46 3d 00 a0 cc c2 3b 7b 08 00 45 00 ..)-F=....;{..E. 0010 00 3c 3c c5 40 00 40 06 7a 0c c0 a8 01 01 c0 a8 .<<.@.@.z....... 0020 01 99 80 0c 00 50 d2 f4 59 be 00 00 00 00 a0 02 .....P..Y....... 0030 16 d0 9a 6f 00 00 02 04 05 b4 04 02 08 0a 00 52 ...o...........R 0040 65 7b 00 00 00 00 01 03 03 00 e{........ Source Destination Protocol Info No. 192.168.1.153 192.168.1.1 TCP www > 32780 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=1661694 TSER=5399931 WS=2 2 Frame 2 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: 00:0c:29:2d:46:3d, Dst: 00:a0:cc:c2:3b:7b Internet Protocol, Src Addr: 192.168.1.153 (192.168.1.153), Dst Addr: 192.168.1.1 (192.168.1.1) Transmission Control Protocol, Src Port: www (80), Dst Port: 32780 (32780), Seq: 0, Ack: 1, Len: 0 0000 00 a0 cc c2 3b 7b 00 0c 29 2d 46 3d 08 00 45 00 ....;{..)-F=..E. 0010 00 3c 00 00 40 00 40 06 b6 d1 c0 a8 01 99 c0 a8 .<..@.@......... 0020 01 01 00 50 80 0c 53 fe c9 b9 d2 f4 59 bf a0 12 ...P..S.....Y... 0030 16 a0 21 bd 00 00 02 04 05 b4 04 02 08 0a 00 19 ..!............. 0040 5a fe 00 52 65 7b 01 03 03 02 Z..Re{.... Source Destination Protocol Info No. 192.168.1.1 192.168.1.153 TCP 32780 > www [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=5399984 TSER=1661694 3 Frame 3 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:a0:cc:c2:3b:7b, Dst: 00:0c:29:2d:46:3d Internet Protocol, Src Addr: 192.168.1.1 (192.168.1.1), Dst Addr: 192.168.1.153 (192.168.1.153) Transmission Control Protocol, Src Port: 32780 (32780), Dst Port: www (80), Seq: 1, Ack: 1, Len: 0 0000 00 0c 29 2d 46 3d 00 a0 cc c2 3b 7b 08 00 45 00 ..)-F=....;{..E. 0010 00 34 3c c6 40 00 40 06 7a 13 c0 a8 01 01 c0 a8 .4<.@.@.z....... 0020 01 99 80 0c 00 50 d2 f4 59 bf 53 fe c9 ba 80 10 .....P..Y.S..... 0030 16 d0 50 1f 00 00 01 01 08 0a 00 52 65 b0 00 19 ..P........Re... 0040 5a fe Z. Source Destination Protocol Info No. 192.168.1.1 192.168.1.153 HTTP GET /index.php HTTP/1.1 4 Frame 4 (439 bytes on wire, 439 bytes captured) Ethernet II, Src: 00:a0:cc:c2:3b:7b, Dst: 00:0c:29:2d:46:3d Internet Protocol, Src Addr: 192.168.1.1 (192.168.1.1), Dst Addr: 192.168.1.153 (192.168.1.153) Transmission Control Protocol, Src Port: 32780 (32780), Dst Port: www (80), Seq: 1, Ack: 1, Len: 373 Hypertext Transfer Protocol GET /index.php HTTP/1.1\r\n Host: server.schule.de\r\n User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050513 Debian/1.7.8-1\r\n Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n Accept-Encoding: gzip,deflate\r\n Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n Keep-Alive: 300\r\n Connection: keep-alive\r\n \r\n 0000 00 0c 29 2d 46 3d 00 a0 cc c2 3b 7b 08 00 45 00 ..)-F=....;{..E. 0010 01 a9 3c c7 40 00 40 06 78 9d c0 a8 01 01 c0 a8 ..<.@.@.x....... 0020 01 99 80 0c 00 50 d2 f4 59 bf 53 fe c9 ba 80 18 .....P..Y.S..... 0030 16 d0 25 c7 00 00 01 01 08 0a 00 52 65 b1 00 19 ..%........Re... 0040 5a fe 47 45 54 20 2f 69 6e 64 65 78 2e 70 68 70 Z.GET /index.php 0050 20 48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a HTTP/1.1..Host: 0060 20 73 65 72 76 65 72 2e 73 63 68 75 6c 65 2e 64 server.schule.d 0070 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d e..User-Agent: M 0080 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 58 31 31 3b ozilla/5.0 (X11; 0090 20 55 3b 20 4c 69 6e 75 78 20 69 36 38 36 3b 20 U; Linux i686; 00a0 65 6e 2d 55 53 3b 20 72 76 3a 31 2e 37 2e 38 29 en-US; rv:1.7.8) 00b0 20 47 65 63 6b 6f 2f 32 30 30 35 30 35 31 33 20 Gecko/20050513 00c0 44 65 62 69 61 6e 2f 31 2e 37 2e 38 2d 31 0d 0a Debian/1.7.8-1.. 00d0 41 63 63 65 70 74 3a 20 74 65 78 74 2f 78 6d 6c Accept: text/xml 00e0 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c ,application/xml 00f0 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 ,application/xht 0100 6d 6c 2b 78 6d 6c 2c 74 65 78 74 2f 68 74 6d 6c ml+xml,text/html 0110 3b 71 3d 30 2e 39 2c 74 65 78 74 2f 70 6c 61 69 ;q=0.9,text/plai 0120 6e 3b 71 3d 30 2e 38 2c 69 6d 61 67 65 2f 70 6e n;q=0.8,image/pn 0130 67 2c 2a 2f 2a 3b 71 3d 30 2e 35 0d 0a 41 63 63 g,*/*;q=0.5..Acc 0140 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a ept-Encoding: gz 0150 69 70 2c 64 65 66 6c 61 74 65 0d 0a 41 63 63 65 ip,deflate..Acce 0160 70 74 2d 43 68 61 72 73 65 74 3a 20 49 53 4f 2d pt-Charset: ISO- 0170 38 38 35 39 2d 31 2c 75 74 66 2d 38 3b 71 3d 30 8859-1,utf-8;q=0 0180 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 .7,*;q=0.7..Keep 0190 2d 41 6c 69 76 65 3a 20 33 30 30 0d 0a 43 6f 6e -Alive: 300..Con 01a0 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c nection: keep-al 01b0 69 76 65 0d 0a 0d 0a ive.... Source Destination Protocol Info No. 192.168.1.153 192.168.1.1 TCP www > 32780 [ACK] Seq=1 Ack=374 Win=6864 Len=0 TSV=1661698 TSER=5399985 5 Frame 5 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:0c:29:2d:46:3d, Dst: 00:a0:cc:c2:3b:7b Internet Protocol, Src Addr: 192.168.1.153 (192.168.1.153), Dst Addr: 192.168.1.1 (192.168.1.1) Transmission Control Protocol, Src Port: www (80), Dst Port: 32780 (32780), Seq: 1, Ack: 374, Len: 0 0000 00 a0 cc c2 3b 7b 00 0c 29 2d 46 3d 08 00 45 00 ....;{..)-F=..E. 0010 00 34 92 ba 40 00 40 06 24 1f c0 a8 01 99 c0 a8 .4..@.@.$....... 0020 01 01 00 50 80 0c 53 fe c9 ba d2 f4 5b 34 80 10 ...P..S.....[4.. 0030 06 b4 5e c1 00 00 01 01 08 0a 00 19 5b 02 00 52 ..^.........[..R 0040 65 b1 e. Source Destination Protocol Info No. 192.168.1.153 192.168.1.1 HTTP HTTP/1.1 200 OK (text/html) 6 Frame 6 (789 bytes on wire, 789 bytes captured) Ethernet II, Src: 00:0c:29:2d:46:3d, Dst: 00:a0:cc:c2:3b:7b Internet Protocol, Src Addr: 192.168.1.153 (192.168.1.153), Dst Addr: 192.168.1.1 (192.168.1.1) Transmission Control Protocol, Src Port: www (80), Dst Port: 32780 (32780), Seq: 1, Ack: 374, Len: 723 Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Date: Mon, 29 Aug 2005 08:29:58 GMT\r\n Server: Apache/1.3.33 (Debian GNU/Linux) PHP/4.3.10-15 mod_ssl/2.8.22 OpenSSL/0.9.7d\r\n X-Powered-By: PHP/4.3.10-15\r\n Keep-Alive: timeout=15, max=100\r\n Connection: Keep-Alive\r\n Transfer-Encoding: chunked\r\n Content-Type: text/html; charset=iso-8859-1\r\n \r\n HTTP chunked response Line-based text data: text/html Anmeldung

Name:

Passwort:

Frame (789 bytes): 0000 00 a0 cc c2 3b 7b 00 0c 29 2d 46 3d 08 00 45 00 ....;{..)-F=..E. 0010 03 07 92 bc 40 00 40 06 21 4a c0 a8 01 99 c0 a8 ....@.@.!J...... 0020 01 01 00 50 80 0c 53 fe c9 ba d2 f4 5b 34 80 18 ...P..S.....[4.. 0030 06 b4 56 19 00 00 01 01 08 0a 00 19 5b 0a 00 52 ..V.........[..R 0040 65 b1 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f e.HTTP/1.1 200 O 0050 4b 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 32 39 K..Date: Mon, 29 0060 20 41 75 67 20 32 30 30 35 20 30 38 3a 32 39 3a Aug 2005 08:29: 0070 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 58 GMT..Server: 0080 41 70 61 63 68 65 2f 31 2e 33 2e 33 33 20 28 44 Apache/1.3.33 (D 0090 65 62 69 61 6e 20 47 4e 55 2f 4c 69 6e 75 78 29 ebian GNU/Linux) 00a0 20 50 48 50 2f 34 2e 33 2e 31 30 2d 31 35 20 6d PHP/4.3.10-15 m 00b0 6f 64 5f 73 73 6c 2f 32 2e 38 2e 32 32 20 4f 70 od_ssl/2.8.22 Op 00c0 65 6e 53 53 4c 2f 30 2e 39 2e 37 64 0d 0a 58 2d enSSL/0.9.7d..X- 00d0 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f Powered-By: PHP/ 00e0 34 2e 33 2e 31 30 2d 31 35 0d 0a 4b 65 65 70 2d 4.3.10-15..Keep- 00f0 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 31 Alive: timeout=1 0100 35 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 6e 5, max=100..Conn 0110 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 ection: Keep-Ali 0120 76 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 ve..Transfer-Enc 0130 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a oding: chunked.. 0140 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 Content-Type: te 0150 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 xt/html; charset 0160 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a 31 =iso-8859-1....1 0170 39 61 0d 0a 0a 20 20 20 20 20 20 3c 68 74 6d 6c 9a... An 0190 6d 65 6c 64 75 6e 67 3c 2f 74 69 74 6c 65 3e 3c meldung< 01a0 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 62 6f /head>. . . 0200 20 20 20 20 3c 70 3e 4e 61 6d 65 3a 3c 62 72 3e

Name:
0210 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 .

. 0240 20 20 20 3c 70 3e 50 61 73 73 77 6f 72 74 3a 3c

Passwort:< 0250 62 72 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 br>.

. 0290 20 20 20 20 20 20 3c 70 3e 3c 69 6e 70 75 74 20

. 02e0 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 . 02f0 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 . 0300 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 0d 0a . .. 0310 30 0d 0a 0d 0a 0.... De-chunked entity body (410 bytes): 0000 0a 20 20 20 20 20 20 3c 68 74 6d 6c 3e 3c 68 65 . Anmeld 0020 75 6e 67 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 ung. . 0040 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63
. 0090 3c 70 3e 4e 61 6d 65 3a 3c 62 72 3e 0a 20 20 20

Name:
. 00a0 20 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65

. < 00d0 70 3e 50 61 73 73 77 6f 72 74 3a 3c 62 72 3e 0a p>Passwort:
. 00e0 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 6e

. 0120 20 20 3c 70 3e 3c 69 6e 70 75 74 20 74 79 70 65

. 0170 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20
. 0180 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f . . Source Destination Protocol Info No. 192.168.1.1 192.168.1.153 TCP 32780 > www [ACK] Seq=374 Ack=724 Win=7230 Len=0 TSV=5400115 TSER=1661706 7 Frame 7 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:a0:cc:c2:3b:7b, Dst: 00:0c:29:2d:46:3d Internet Protocol, Src Addr: 192.168.1.1 (192.168.1.1), Dst Addr: 192.168.1.153 (192.168.1.153) Transmission Control Protocol, Src Port: 32780 (32780), Dst Port: www (80), Seq: 374, Ack: 724, Len: 0 0000 00 0c 29 2d 46 3d 00 a0 cc c2 3b 7b 08 00 45 00 ..)-F=....;{..E. 0010 00 34 3c c8 40 00 40 06 7a 11 c0 a8 01 01 c0 a8 .4<.@.@.z....... 0020 01 99 80 0c 00 50 d2 f4 5b 34 53 fe cc 8d 80 10 .....P..[4S..... 0030 1c 3e 45 da 00 00 01 01 08 0a 00 52 66 33 00 19 .>E........Rf3.. 0040 5b 0a [. Source Destination Protocol Info No. 192.168.1.1 192.168.1.153 HTTP POST /index.php HTTP/1.1 8 Frame 8 (482 bytes on wire, 482 bytes captured) Ethernet II, Src: 00:a0:cc:c2:3b:7b, Dst: 00:0c:29:2d:46:3d Internet Protocol, Src Addr: 192.168.1.1 (192.168.1.1), Dst Addr: 192.168.1.153 (192.168.1.153) Transmission Control Protocol, Src Port: 32780 (32780), Dst Port: www (80), Seq: 374, Ack: 724, Len: 416 Hypertext Transfer Protocol POST /index.php HTTP/1.1\r\n Host: server.schule.de\r\n User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050513 Debian/1.7.8-1\r\n Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n Accept-Encoding: gzip,deflate\r\n Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n Keep-Alive: 300\r\n Connection: keep-alive\r\n Referer: http://server.schule.de/index.php\r\n 0000 00 0c 29 2d 46 3d 00 a0 cc c2 3b 7b 08 00 45 00 ..)-F=....;{..E. 0010 01 d4 3c c9 40 00 40 06 78 70 c0 a8 01 01 c0 a8 ..<.@.@.xp...... 0020 01 99 80 0c 00 50 d2 f4 5b 34 53 fe cc 8d 80 18 .....P..[4S..... 0030 1c 3e 56 99 00 00 01 01 08 0a 00 52 93 99 00 19 .>V........R.... 0040 5b 0a 50 4f 53 54 20 2f 69 6e 64 65 78 2e 70 68 [.POST /index.ph 0050 70 20 48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 p HTTP/1.1..Host 0060 3a 20 73 65 72 76 65 72 2e 73 63 68 75 6c 65 2e : server.schule. 0070 64 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 de..User-Agent: 0080 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 58 31 31 Mozilla/5.0 (X11 0090 3b 20 55 3b 20 4c 69 6e 75 78 20 69 36 38 36 3b ; U; Linux i686; 00a0 20 65 6e 2d 55 53 3b 20 72 76 3a 31 2e 37 2e 38 en-US; rv:1.7.8 00b0 29 20 47 65 63 6b 6f 2f 32 30 30 35 30 35 31 33 ) Gecko/20050513 00c0 20 44 65 62 69 61 6e 2f 31 2e 37 2e 38 2d 31 0d Debian/1.7.8-1. 00d0 0a 41 63 63 65 70 74 3a 20 74 65 78 74 2f 78 6d .Accept: text/xm 00e0 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d l,application/xm 00f0 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 l,application/xh 0100 74 6d 6c 2b 78 6d 6c 2c 74 65 78 74 2f 68 74 6d tml+xml,text/htm 0110 6c 3b 71 3d 30 2e 39 2c 74 65 78 74 2f 70 6c 61 l;q=0.9,text/pla 0120 69 6e 3b 71 3d 30 2e 38 2c 69 6d 61 67 65 2f 70 in;q=0.8,image/p 0130 6e 67 2c 2a 2f 2a 3b 71 3d 30 2e 35 0d 0a 41 63 ng,*/*;q=0.5..Ac 0140 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 cept-Encoding: g 0150 7a 69 70 2c 64 65 66 6c 61 74 65 0d 0a 41 63 63 zip,deflate..Acc 0160 65 70 74 2d 43 68 61 72 73 65 74 3a 20 49 53 4f ept-Charset: ISO 0170 2d 38 38 35 39 2d 31 2c 75 74 66 2d 38 3b 71 3d -8859-1,utf-8;q= 0180 30 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a 4b 65 65 0.7,*;q=0.7..Kee 0190 70 2d 41 6c 69 76 65 3a 20 33 30 30 0d 0a 43 6f p-Alive: 300..Co 01a0 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 nnection: keep-a 01b0 6c 69 76 65 0d 0a 52 65 66 65 72 65 72 3a 20 68 live..Referer: h 01c0 74 74 70 3a 2f 2f 73 65 72 76 65 72 2e 73 63 68 ttp://server.sch 01d0 75 6c 65 2e 64 65 2f 69 6e 64 65 78 2e 70 68 70 ule.de/index.php 01e0 0d 0a .. Source Destination Protocol Info No. 192.168.1.153 192.168.1.1 TCP www > 32780 [ACK] Seq=724 Ack=790 Win=7936 Len=0 TSV=1670238 TSER=5411737 9 Frame 9 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:0c:29:2d:46:3d, Dst: 00:a0:cc:c2:3b:7b Internet Protocol, Src Addr: 192.168.1.153 (192.168.1.153), Dst Addr: 192.168.1.1 (192.168.1.1) Transmission Control Protocol, Src Port: www (80), Dst Port: 32780 (32780), Seq: 724, Ack: 790, Len: 0 0000 00 a0 cc c2 3b 7b 00 0c 29 2d 46 3d 08 00 45 00 ....;{..)-F=..E. 0010 00 34 92 be 40 00 40 06 24 1b c0 a8 01 99 c0 a8 .4..@.@.$....... 0020 01 01 00 50 80 0c 53 fe cc 8d d2 f4 5c d4 80 10 ...P..S.....\... 0030 07 c0 09 fe 00 00 01 01 08 0a 00 19 7c 5e 00 52 ............|^.R 0040 93 99 .. Source Destination Protocol Info No. 192.168.1.1 192.168.1.153 HTTP Continuation or non-HTTP traffic (application/x-www-form-urlencoded) 10 Frame 10 (188 bytes on wire, 188 bytes captured) Ethernet II, Src: 00:a0:cc:c2:3b:7b, Dst: 00:0c:29:2d:46:3d Internet Protocol, Src Addr: 192.168.1.1 (192.168.1.1), Dst Addr: 192.168.1.153 (192.168.1.153) Transmission Control Protocol, Src Port: 32780 (32780), Dst Port: www (80), Seq: 790, Ack: 724, Len: 122 Hypertext Transfer Protocol Content-Type: application/x-www-form-urlencoded\r\n Content-Length: 51\r\n \r\n Line-based text data: application/x-www-form-urlencoded name=muster&pass=geheim&mach=Formulardaten+absenden 0000 00 0c 29 2d 46 3d 00 a0 cc c2 3b 7b 08 00 45 00 ..)-F=....;{..E. 0010 00 ae 3c ca 40 00 40 06 79 95 c0 a8 01 01 c0 a8 ..<.@.@.y....... 0020 01 99 80 0c 00 50 d2 f4 5c d4 53 fe cc 8d 80 18 .....P..\.S..... 0030 1c 3e af b2 00 00 01 01 08 0a 00 52 93 c8 00 19 .>.........R.... 0040 7c 5e 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 |^Content-Type: 0050 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 application/x-ww 0060 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 w-form-urlencode 0070 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 d..Content-Lengt 0080 68 3a 20 35 31 0d 0a 0d 0a 6e 61 6d 65 3d 6d 75 h: 51....name=mu 0090 73 74 65 72 26 70 61 73 73 3d 67 65 68 65 69 6d ster&pass=geheim 00a0 26 6d 61 63 68 3d 46 6f 72 6d 75 6c 61 72 64 61 &mach=Formularda 00b0 74 65 6e 2b 61 62 73 65 6e 64 65 6e ten+absenden Source Destination Protocol Info No. 192.168.1.153 192.168.1.1 TCP www > 32780 [ACK] Seq=724 Ack=912 Win=7936 Len=0 TSV=1670240 TSER=5411784 11 Frame 11 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:0c:29:2d:46:3d, Dst: 00:a0:cc:c2:3b:7b Internet Protocol, Src Addr: 192.168.1.153 (192.168.1.153), Dst Addr: 192.168.1.1 (192.168.1.1) Transmission Control Protocol, Src Port: www (80), Dst Port: 32780 (32780), Seq: 724, Ack: 912, Len: 0 0000 00 a0 cc c2 3b 7b 00 0c 29 2d 46 3d 08 00 45 00 ....;{..)-F=..E. 0010 00 34 92 c0 40 00 40 06 24 19 c0 a8 01 99 c0 a8 .4..@.@.$....... 0020 01 01 00 50 80 0c 53 fe cc 8d d2 f4 5d 4e 80 10 ...P..S.....]N.. 0030 07 c0 09 53 00 00 01 01 08 0a 00 19 7c 60 00 52 ...S........|`.R 0040 93 c8 .. Source Destination Protocol Info No. 192.168.1.153 192.168.1.1 HTTP HTTP/1.1 200 OK (text/html) 12 Frame 12 (593 bytes on wire, 593 bytes captured) Ethernet II, Src: 00:0c:29:2d:46:3d, Dst: 00:a0:cc:c2:3b:7b Internet Protocol, Src Addr: 192.168.1.153 (192.168.1.153), Dst Addr: 192.168.1.1 (192.168.1.1) Transmission Control Protocol, Src Port: www (80), Dst Port: 32780 (32780), Seq: 724, Ack: 912, Len: 527 Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Date: Mon, 29 Aug 2005 08:30:07 GMT\r\n Server: Apache/1.3.33 (Debian GNU/Linux) PHP/4.3.10-15 mod_ssl/2.8.22 OpenSSL/0.9.7d\r\n X-Powered-By: PHP/4.3.10-15\r\n Keep-Alive: timeout=15, max=99\r\n Connection: Keep-Alive\r\n Transfer-Encoding: chunked\r\n Content-Type: text/html; charset=iso-8859-1\r\n \r\n HTTP chunked response Line-based text data: text/html Wiederaufruf

Die Daten waren wie folgt:
Name: muster
Passwort: geheim

Frame (593 bytes): 0000 00 a0 cc c2 3b 7b 00 0c 29 2d 46 3d 08 00 45 00 ....;{..)-F=..E. 0010 02 43 92 c2 40 00 40 06 22 08 c0 a8 01 99 c0 a8 .C..@.@."....... 0020 01 01 00 50 80 0c 53 fe cc 8d d2 f4 5d 4e 80 18 ...P..S.....]N.. 0030 07 c0 ba 41 00 00 01 01 08 0a 00 19 7c 6a 00 52 ...A........|j.R 0040 93 c8 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f ..HTTP/1.1 200 O 0050 4b 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 32 39 K..Date: Mon, 29 0060 20 41 75 67 20 32 30 30 35 20 30 38 3a 33 30 3a Aug 2005 08:30: 0070 30 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 07 GMT..Server: 0080 41 70 61 63 68 65 2f 31 2e 33 2e 33 33 20 28 44 Apache/1.3.33 (D 0090 65 62 69 61 6e 20 47 4e 55 2f 4c 69 6e 75 78 29 ebian GNU/Linux) 00a0 20 50 48 50 2f 34 2e 33 2e 31 30 2d 31 35 20 6d PHP/4.3.10-15 m 00b0 6f 64 5f 73 73 6c 2f 32 2e 38 2e 32 32 20 4f 70 od_ssl/2.8.22 Op 00c0 65 6e 53 53 4c 2f 30 2e 39 2e 37 64 0d 0a 58 2d enSSL/0.9.7d..X- 00d0 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f Powered-By: PHP/ 00e0 34 2e 33 2e 31 30 2d 31 35 0d 0a 4b 65 65 70 2d 4.3.10-15..Keep- 00f0 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 31 Alive: timeout=1 0100 35 2c 20 6d 61 78 3d 39 39 0d 0a 43 6f 6e 6e 65 5, max=99..Conne 0110 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 ction: Keep-Aliv 0120 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f e..Transfer-Enco 0130 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 ding: chunked..C 0140 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 ontent-Type: tex 0150 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d t/html; charset= 0160 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a 64 37 iso-8859-1....d7 0170 20 0d 0a 0a 20 20 20 20 20 20 3c 68 74 6d 6c 3e ... 0180 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 69 65 Wie 0190 64 65 72 61 75 66 72 75 66 3c 2f 74 69 74 6c 65 deraufruf. < 01b0 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 70 body>.

Die Daten waren 01d0 20 77 69 65 20 66 6f 6c 67 74 3a 3c 62 72 20 2f wie folgt:
. Nam 01f0 65 3a 20 6d 75 73 74 65 72 20 3c 62 72 20 2f 3e e: muster
0200 0a 20 20 20 20 20 20 20 20 20 20 20 50 61 73 73 . Pass 0210 77 6f 72 74 3a 20 67 65 68 65 69 6d 0a 20 20 20 wort: geheim. 0220 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20

. 0230 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f . . ..0... 0250 0a . De-chunked entity body (215 bytes): 0000 0a 20 20 20 20 20 20 3c 68 74 6d 6c 3e 3c 68 65 . Wieder 0020 61 75 66 72 75 66 3c 2f 74 69 74 6c 65 3e 3c 2f aufruf. .

Di 0050 65 20 44 61 74 65 6e 20 77 61 72 65 6e 20 77 69 e Daten waren wi 0060 65 20 66 6f 6c 67 74 3a 3c 62 72 20 2f 3e 0a 20 e folgt:
. 0070 20 20 20 20 20 20 20 20 20 20 4e 61 6d 65 3a 20 Name: 0080 6d 75 73 74 65 72 20 3c 62 72 20 2f 3e 0a 20 20 muster
. 0090 20 20 20 20 20 20 20 20 20 50 61 73 73 77 6f 72 Passwor 00a0 74 3a 20 67 65 68 65 69 6d 0a 20 20 20 20 20 20 t: geheim. 00b0 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 2f 62

. . . Source Destination Protocol Info No. 192.168.1.1 192.168.1.153 TCP 32780 > www [ACK] Seq=912 Ack=1251 Win=8676 Len=0 TSV=5411792 TSER=1670250 13 Frame 13 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 00:a0:cc:c2:3b:7b, Dst: 00:0c:29:2d:46:3d Internet Protocol, Src Addr: 192.168.1.1 (192.168.1.1), Dst Addr: 192.168.1.153 (192.168.1.153) Transmission Control Protocol, Src Port: 32780 (32780), Dst Port: www (80), Seq: 912, Ack: 1251, Len: 0 0000 00 0c 29 2d 46 3d 00 a0 cc c2 3b 7b 08 00 45 00 ..)-F=....;{..E. 0010 00 34 3c cb 40 00 40 06 7a 0e c0 a8 01 01 c0 a8 .4<.@.@.z....... 0020 01 99 80 0c 00 50 d2 f4 5d 4e 53 fe ce 9c 80 10 .....P..]NS..... 0030 21 e4 ed 0d 00 00 01 01 08 0a 00 52 93 d0 00 19 !..........R.... 0040 7c 6a |j