Re: [squid-users] ICAP doesnt see POST data

From: Luis Daniel Lucio Quiroz <luis.daniel.lucio_at_gmail.com>
Date: Wed, 3 Mar 2010 16:35:16 -0600

Le Mercredi 3 Mars 2010 16:12:33, Amos Jeffries a écrit :
> On Wed, 3 Mar 2010 07:37:34 -0600, Luis Daniel Lucio Quiroz
>
> <luis.daniel.lucio_at_gmail.com> wrote:
> > Le Mardi 2 Mars 2010 13:42:31, Henrik Nordstrom a écrit :
> >> mån 2010-03-01 klockan 19:03 -0600 skrev Luis Daniel Lucio Quiroz:
> >> > as we have a squid with ICAP we have a requirement to save all data
> >> > sent.
> >> > We have a ICAP that does that, how ever when logging we can see
> >> >
> >> > POST url
> >> > headers
> >> >
> >> > but we dont see data that is sent by post, are we missing something?
> >>
> >> Should be there... and I think it is..
> >>
> >> Have you tried inspecting the traffic with wireshark?
> >>
> >> Regards
> >> Henrik
> >
> > Yes I did
> > that's why i realize of that, i did tcpdump -s0 -X so I'm pretty sure I
> > got
> > whole packet.
> >
> > LD
>
> Do the POST headers contain "Expect:" ?
>
> Amos
No they dont
look

POST https://www.google.com/accounts/ServiceLoginAuth?service=mail Indicateurs
chargement[LOAD_DOCUMENT_URI LOAD_INITIAL_DOCUMENT_URI ] Taille contenu[897]
Type Mime[text/html]
   En-têtes requête:
      Host[www.google.com]
      User-Agent[Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2)
Gecko/20100125 Mandriva Linux/1.9.2-2mdv2010.1 (2010.1) Firefox/3.6]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[fr,fr-fr;q=0.8,en-us;q=0.5,en;q=0.3]
      Accept-Encoding[gzip,deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Keep-Alive[115]
      Connection[keep-alive]
      Referer[https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&rm=false&continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&bsv=zpwhtygjntrz&scc=1&ltmpl=default&ltmplcache=2]
      Cookie[GoogleAccountsLocale_session=fr;
__utma=173272373.232088431.1267316200.1267316200.1267316200.1;
__utmb=173272373; __utmc=173272373;
__utmz=173272373.1267316200.1.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none);
GALX=1lukNt41cgM;
PREF=ID=cfdfa006ee8f6444:TM=1267313740:LM=1267313740:S=o0KF7YNRgGFHVUOy;
TZ=360; GMAIL_RTT=191; GMAIL_LOGIN=T1267316206915/1267316206915/1267316237089]
   Données POST:
      ltmpl[default]
      ltmplcache[2]
      continue[http%3A%2F%2Fmail.google.com%2Fmail%2F%3F]
      service[mail]
      rm[false]
      dsh[-3440628357213899764]
      scc[1]
      GALX[1lukNt41cgM]
      Email[luis.daniel.lucio%40gmail.com]
      Passwd[XXXXXXXX]
      rmShown[1]
      signIn[Connexion]
      asts[]

These data was got using Tamper Data from FF. But ICAP doest shoyw Post data
(Données)
Received on Wed Mar 03 2010 - 22:35:08 MST

This archive was generated by hypermail 2.2.0 : Thu Mar 04 2010 - 12:00:06 MST