This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Referer header not matching an earlier request

0

In the pcap file "2015-10-23-Angler-EK-sends-TeslaCrypt-2.0-traffic.pcap" in web page, packet 505 is a HTTP request whose Referer header almost match the HTTP request in packet 406, but misses a few bytes from the URL as in packet 406. Wonder why.

Thanks.

asked 30 Oct '15, 08:37

pktUser1001's gravatar image

pktUser1001
201495054
accept rate: 12%