This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Here is the first line of a captured get request, qqCcEv#[email protected]^PGET / HTTP/1.1

Here is another first line- to the same site, [email protected] #PGET / HTTP/1.1

The wierd qq.. bytes before the 'GET', what are they for? I am getting drastically different responses depending on their content.

asked 11 Nov '12, 16:11

jmu2101's gravatar image

jmu2101
6336
accept rate: 0%

The wierd qq.. bytes before the 'GET', what are they for?

hard to say without the full packet. Can you please post the whole packet that contains that request? You can export just that one packet and upload it to cloudshark.org (or any other online storage). If it's possible to upload the response of the server as well, please do so.

Regards Kurt

(11 Nov '12, 16:44) Kurt Knochner ♦

You're not looking at the bytes in the packets that appear before the GET request, are you? In the link-layer packet that contains the first part of the GET request (or all of it if it fits in a single TCP segment), before the GET request you'll have a TCP header, and before the TCP header you'll have an IPv4 or an IPv6 header, and before the IP header you'll probably have some link-layer header such as an Ethernet header or an 802.11 header or a PPP header or....

permanent link

answered 11 Nov '12, 17:13

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×293
×23

question asked: 11 Nov '12, 16:11

question was seen: 9,533 times

last updated: 11 Nov '12, 17:13

p​o​w​e​r​e​d by O​S​Q​A